> You shouldn't need to set up any static routes on your clients, a
> default gateway should be sufficient.  You should only need to add
> firewall rules to permit traffic from LAN to OPT1 and vice versa.
That's what I thought too ... but it isn't enough..

When I try to ping or trace 10.2.1.1 from 10.1.1.12 it doesn't respon and the trace only go to the
m0n0wall and stops there ..

--
Thanx,
Kurt Inge