> panic:/# iptables -t nat -A PREROUTING -i eth0 -p tcp -d > 203.190.72.108 --dport 21 -j DNAT --to 10.0.0.11:21 > panic:/# iptables -A FORWARD -i eth0 -o eth1 -p tcp -d > 203.190.72.108 --dport 21 -j ACCEPT > panic:/# telnet 203.190.72.108 21 > Trying 203.190.72.108... > telnet: Unable to connect to remote host: Connection refused > panic:/# telnet 10.0.0.11 21 > Trying 10.0.0.11... > Connected to 10.0.0.11. > Escape character is '^]'. > 220 Dynu FTP Server (Version 1.13) > ^] > telnet> q > Connection closed. > panic:/# telnet 203.190.72.108 21 > Trying 203.190.72.108... > telnet: Unable to connect to remote host: Connection refused > panic:/# Did you load ip_conntrack_ftp and ip_nat_ftp ? And do you use : iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT Gr, Rob