When running a firewall server for connecting a local area network to the Internet, a method has to be found of granting the users in the LAN access to the services and resources of the Internet without decreasing the security of the LAN or the firewall server. The Internet service access system IpAccess developed at the European Institute for System Security (EISS) allows the users in the internal LAN to access the services in the Internet. Two different methods are used: "TCP forwarding" redirects TCP connections over the firewall server into the Internet. "Application forwarding" runs the network program on the firewall server, allowing access to any network protocol this machine provides (especially UDP and raw IP). The integrated rights check permits access control to the Internet based on the user name, calling client workstation, and requested service.>