You do infact need DNAT and not SNAT iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j DNAT --to-destination x.y.z.2:80 this should work. dhiraj -----Original Message----- From: xchris [mailto:lyra@xxxxxxxxxxxxx] Sent: 08 April 2003 23:17 To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: redirection ----- Original Message ----- From: "Eric Joe" <sysop@xxxxxxxx> > I didnt catch the fact that you need the source address. Are you tracking > this for a reason? You can probably have iptables log the source address. > This does in fact work, been using it for about 6 months now. Let me post > my exact rules (IPs are obsfucated) i need it because i'm trying to do a simple load balancing between 2 local servers running opennap. (and opennap needs to know the IP address otherwise downloads dont start) thnak you xchris