I am working with linux 7.3, just can not set up the port forward rule to re-direct external http access to the firewall (ppp0) into an internal network web server. The firewall is doing masq'ing. could u pls give an example? I tried ipchains -A input -i ppp0 -p tcp --sport 110 --dport 80:80 -j REDIRECT --destination 10.40.240.100/32 , but don;t think it is correct. Thanks for your help. George