Great, no more invalid arguments. But now the lines: localhost root # iptables -t nat -F localhost root # iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to 217.129.146.56 localhost root # iptables -t nat -n -L Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT all -- 0.0.0.0/0 0.0.0.0/0 to:217.129.146.56 Chain OUTPUT (policy ACCEPT) target prot opt source destination The network topology is: (192.168.0.1) (217.129.146.56) LAN ------ [eth0 MYMACHINE eth1] --------- INTERNET I want to give full access of users in the LAN to the Internet. What are the commands I should give to Iptables for that? Best regards, Paulo > No no, you shouldn't recompile your kernel at all. > The only thing you should recompile is the userspace iptables. > > KERNEL_DIR=/usr/src/linux-2.4.20 make install > > something like that.