Hi, My understanding of masquerading is that packets from the masqueraded host are remapped to a different port on the masquerading host and sent out. How does this work with ICMP where there are no port numbers in the protocol? If A is the masquerading router and B is the masqueraded host, how is it possible to distinguish a ping to C from A and a ping to C from B? Thanks, Kenneth - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html