Hi, I have the following setup: eth0 internal network 10.0.0.0/8 eth1 wan interface0 100.0.0.1 ppp link eth2 wan interface1 24.1.1.1/24 Now I have routable IPs on wan interface0 call it 100.0.1.0/24 and I do this: route add -net 100.0.1.0 netmask 255.255.255.0 eth0 So the IPs will live on eth0 along with our internal network (yes I know I should use a DMZ interface) Now if I do the following: ipmasqadm portfw -a -P tcp -L 100.0.1.1 80 -R 10.0.0.10 80 Which forwards all ports from 100.0.1.1 80 to 10.0.0.10 80, this works fine from outside the network. But if I try this from inside the network, it doesn't appear to work... tcpdump output on request.... 10.0.0.0/8 is masq'd to the outside world as well.... What can I do to make this work? Regards, Edwin - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org