Hi Sam, just for the fun of it, I tried: iptables -t mangle -A PREROUTING -m gateway --nexthop 10.10.96.1 and it locked up hard (not even sysrq-b was possible). I am not sure why that happened - it does work properly in -t filter -A OUTPUT, though. I'll experiment a bit. The codebase I am on is at http://dev.computergmbh.de/wsvn/misc_kernel/xt_gateway/ - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html