On Fri, Dec 07, 2001 at 04:46:00PM -0600, Greg Scott wrote: > What if you used some iptables rules to DENY packets from eth0 with > destination ip address 172.16.1.100? I'm thinking you might have to put in > the rules in the OUTPUT table and catch them on the way out from > 192.168.1.100. No clue whether or not that will work, but worth a try. That just drops the packets. You might try some DNAT stuff on the iptables POSTROUTING chain, perhaps that works. I think it might. Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services Trilab The Technology People Netherlabs BV / Rent-a-Nerd.nl - Nerd Available - 'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet