On Mon, Feb 17, 2003 at 03:43:58PM +0100, Andreas Meyer wrote: > Running fetchmail from the mailserver behind the firewall I have > the problem to go to the WAN. > iptables -t nat -A PREROUTING -p TCP --dport 110 -m state --state > NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.75:110 You might want to do SNAT or MASQUERADING in order to be able to access the WAN. > But writing > > iptables -t nat -A PREROUTING -p TCP --dport 110 -m state --state > NEW,ESTABLISHED,RELATED -j DNAT --to 0.0.0.0:110 > > I get a > kernel: martian destination 0.0.0.0 from 192.168.1.3, dev eth0 What do you want your outbound packets to look like? 0.0.0.0 ? -- wdyck at gmx dot net