I have been trying to get 1:1 NAT working like with a Cisco PIX and for the most part I use the following rules and it works..but for only a few a hours then stops. iptables -t nat -A PREROUTING -p tcp -d 146.145.134.194 --dport 80 -j DNAT --to 192.168.1.197 iptables -t nat -A POSTROUTING -p tcp -s 192.168.1.97 -j SNAT --to 146.145.134.194 So it works for a few hours then stops, but I can get it working again by aliasing an interface i.e ifconfig eth0:1 146.145.134.194 bcast and netmask etc.. And instantly it starts working again. Anyone know what my problem is? Thanks to all those who helped me out. -Mike