On Tuesday 08 April 2003 08:44 pm, Eric Joe wrote: > Do this > > > iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -d x.y.z.1 -j DNAT > --to x.y.z.2:80 > > iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to x.y.z.1 am i wrong or i loose the original connection source address? if i check the log in x.y.z.2 i see connections from x.y.z.1. I really need to preserve the source address. Thank you very much xchris