On Mon, 24 Feb 2003, louie miranda wrote: > Im trying just to forward simple ftp, 21 request into my internal machine. > Im typing this but it does not work.. > iptables -t nat -A PREROUTING -i eth0 -p tcp -d 10.0.0.11 --dport 21 -j > DNAT --to 203.190.72.108:21 > iptables -A FORWARD -i eth0 -o eth1 -p tcp -d 203.190.72.108 --dport 21 -j > ACCEPT Are you *sure* of those IP's? 10.0.0.11 is a private IP and is unusable on the internet - however your rules state that 10.0.0.11 is located on the internet. I'm pretty sure, you need to exchange the global and local IP. /Rasmus -- -- [ Rasmus "Møffe" Bøg Hansen ] --------------------------------------- Drink wet cement: Get Stoned. ----------------------------------[ moffe at amagerkollegiet dot dk ] --