On Wednesday 09 April 2003 12:03 pm, dhiraj.2.bhuyan@xxxxxx wrote: > try one thing - flush all rules and add the rule > iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j DNAT > --to-destination x.y.z.2:80 > > I have a feeling that you are doing something in the POSTROUTING chain > which is why you are not getting the right result. Or maybe you have a rule > to drop the packet defined? > nope. i flushed everithing! all tables cleared. i added only the DNAT line... but it still doesn't work. thank you P.S.:I don't understand why if i use an ip of another interface it works. (a classic DNAT to dmz)