Hello All I have several PCs behind an old box functioning as my firewall. I use NAT to provide internet access through the firewall. I also do some basic port forwarding to allow SSH and HTTP into my network from outside. Note that the external box, gamebox and firewall are all different hosts. Now, I'm trying to setup incoming and outgoing traffic correctly to play a game. The game's website specifies these ports: * Outgoing: src port: 5120-5129 dst port: 5121-5300 * Incoming: src port: 5121-5300 dst port: 5120-5129 Now, for incoming packets, I have: iptables -A PREROUTING -t nat -p udp \ -d ${external} --dport 5120:5129 -j DNAT --to ${gamebox} Do I really need to specify the --sport for incoming? Or will the NAT'd packets retain that src-port data? And do I really need to do anything for outgoing packets? As long as they are not blocked, should it work fine? Any info is appreciated. ( I have nobody else with the game to test this with so it makes it rather hard to debug via repeated hacking ;-) Thanks - JB # John Bleichert # http://vonbek.dhs.org/latest.jpg