Moi! Somehow I feel I'm missing something obvious here, but hopefully you can help me out. I've set up a few simple NAT rules, pretty much boilerplate from the example in the iproute2 docs. The host is not a router but proxy-arps for the IP addresses it NATs. The setup works fine from anywhere, but on the NAT host, when I try to access one of the translated addresses, EINVAL is all I get. Exemplary setup: # ip rule 0: from all lookup local 320: from 10.0.1.1 lookup main map-to 134.2.1.1 32766: from all lookup main 32767: from all lookup default # ip route ls type nat table all 134.2.1.1 via 10.0.1.1 table local scope host The 10.0.1.0/24 subnet is routed to a ppp tunnel. This local part works fine. But when I try to access the globally valid addresses from localhost, it fails: # ip route get 134.2.1.1 RTNETLINK answers: Invalid argument # ping 134.2.1.1 connect: Invalid argument This is on 2.4.0-test12 with policy routing and fast NAT compiled in. Would someone please help me get clue? Thanks, Daniel. -- GNU/Linux Audio Mechanics - http://www.glame.de Cutting Edge Office - http://www.c10a02.de GPG Key ID 89BF7E2B - http://www.keyserver.net - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org