If only a single user ( and no more than one ) requires this, you could try forwarding in PREROUTING, like: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 113 -j DNAT --to 192.168.1.XX:113 It should work. But this will redirect ALL ident connections that reach your machine to internal user machine. It's impossible to know if it's an mirc ident request or if it's a sendmail ident request for example. Sincerily, Leonardo Rodrigues ----- Original Message ----- From: Robert Jones To: netfilter@lists.netfilter.org Sent: Tuesday, February 04, 2003 6:50 PM Subject: iptables and port 113/auth requests I am trying to build a firewall and i have a problem i have redhat 8.0 2 nic cards eth0 and eth1..... eth0 being external eth1 being internal eth0 is connected to a cable modem. gets its ip via dhcp i run a dhcpd server on my eth1 int lan is 192.168.1.0 trying to set up ip masquerading for my int lan some of my users use mirc on irc servers that required an ident reply (port 113) i would like the ident requests from the irc server to be fowarded to the int lan so that mirc can reply to the requests i domt know if this is even possible but was wondering if anyone could help me