I tried the examples that were shown and I cannot contact the servers. do I need to alias the IPs on a ethernet card? i.e eth0:1? from outside to inside: iptables -t nat -A PREROUTING -d 208.15.232.12 -j DNAT --to 192.168.1.167 the other way around: iptables -t nat -A POSTROUTING -s 192.168.1.167 -j SNAT --to 208.15.131.12 ----- Original Message ----- From: "Mike" <mikeeo@msn.com> To: <netfilter@lists.netfilter.org> Sent: Tuesday, January 21, 2003 11:00 AM Subject: 1:1 NAT > Can anyone point me to some docs on setting up 1:1 NAT on netfilter? > > What I am trying to do is like how its done on cisco PIX i.e > "static (inside,outside) 208.15.232.12 192.168.1.167 netmask 255.255.255.255 > 0 0" > > That way I don't have to do IP alias on my ethernet card. > > Thanks, > > Mike > > >