Jeremy Sowden <jeremy@xxxxxxxxxx> wrote: > +ip daddr 10.0.0.1 tcp dport 55900-55910 dnat ip to 192.168.127.1:5900-5910/55900;ok > +ip6 daddr 10::1 tcp dport 55900-55910 dnat ip6 to [::c0:a8:7f:1]:5900-5910/55900;ok This syntax is horrible (yes, I know, xtables fault). Do you think this series could be changed to grab the offset register from the left edge of the range rather than requiring the user to specify it a second time? Something like: ip daddr 10.0.0.1 tcp dport 55900-55910 dnat ip to 192.168.127.1:5900-5910 I'm open to other suggestions of course.