Ok, another challenge. SNAT works fine, but I need the outside WAN address to look as if it came from an address on the eth1 network, not the Upstream WAN network. My linux router ports: eth4 192.168.1.0/24 ------------ (local offices, admin net) eth1 209.x.x.x/24 -------- (downstream WAN) WAN1 64.x.x.x/30 --------- (upstream provider) all traffic from 192.168.1.0/24 must look like its from 209.x.x.13 traffic flowing into WAN1 with a destination address of 209.x.x.13 somehow needs to get routed out the eth4 interface and "un-natted" instead of routing out eth1. I have: iptables -t nat -A POSTROUTING -o WAN1 -j SNAT --to 209.x.x.13 Is there some way to use DNAT to fool the kernel routing into properly routing this? Thanks, Del W.