Wow Thanks very much for all the replies..... and examples too :) Looks like I can get rid of the dodgy redir. thanks again! :) -----Original Message----- From: Sander Sneekes [mailto:sander@dmdsecure.com] Sent: Friday, 13 December 2002 8:47 PM To: paul.gibson@subspace.net.au Cc: Netfilter Subject: Re: Query.... redirecting traffic iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j MASQUERADE iptables -A FORWARD -p tcp --dport 80 -d 192.168.1.1 -j ACCEPT iptables -A PREROUTING -t nat -p tcp --dport 80 -d 10.10.10.10 -j DNAT --to 192.168.1.1:12345 On Fri, 2002-12-13 at 10:02, Paul Gibson wrote: > Hello, > > I am wondering if netfilter can do the following..... > > http connection comes in on 10.10.10.10 port 80, can iptables then redirect > this to go to 192.168.1.1 port 12345 & also allow the returning data to go > back the opposite way ??? > > We are currently using "redir" to do it and are having some porblems with it > due to an application we run. > > TIA > > Paul. -- Sander Sneekes sander@dmdsecure.com -- Never argue with an idiot. They drag you down to their level, then beat you with experience.