I'm pretty sure my problem was I didn't have ip forwarding turned on. I've enabled it but machine A is being used for something else right now so I haven't tested it yet. I thought it might be something dumb, and that fits the bill, but if I have any other problems I'll be sure to ask. ;) On a side note, I'm reading the LARTC howto and it's impressive. Thanks, David Ruggles CCNA MCSE (NT) CNA A+ Network Engineer, Safe Data, Inc 910-285-7200 david@safedatausa.com 0100011101101111011001000110110001101111011101100110010101110011011110010110 111101110101 ----- Original Message ----- From: "Arnt Karlsen" <arnt@c2i.net> To: "David Ruggles" <david@safedatausa.com> Cc: <netfilter@lists.netfilter.org> Sent: Wednesday, March 05, 2003 11:37 AM Subject: Re: Quick Routing question > On Wed, 5 Mar 2003 09:30:35 -0500, > "David Ruggles" <david@safedatausa.com> wrote in message > <00ae01c2e323$ca9b6fa0$1f0016ac@daviddesktop>: > > > ----- Original Message ----- > > From: "Arnt Karlsen" <arnt@c2i.net> > > Subject: Re: Quick Routing question > > > > [Snipped Dig commands] > > > > > > > > ..you run a _root_ name server and come here asking us amateur > > > newbies with less than 25 yrs internet experience for netfilter > > > advice????? ;-) > > > > > > > I hope you're joking. 172.22.x.x is inside the Class B non-routable > > addresses set aside by RFC 1918 > > ..got that right, only just _after_ posting. ;-) > > ..it's 172.22.0.0/what-netmask? > > > Thanks, > > David Ruggles > > > > CCNA MCSE (NT) CNA A+ > > Network Engineer, Safe Data, Inc > > 910-285-7200 david@safedatausa.com > > 010001110110111101100100011011000110111101110110011001010111001101111 > > 0010110 111101110101 > > > > > -- > ..med vennlig hilsen = with Kind Regards from Arnt... ;-) > ...with a number of polar bear hunters in his ancestry... > Scenarios always come in sets of three: > best case, worst case, and just in case. > >