You have to bind 10.0.0.1 to the network interface, or else the OS may throw it away. ip addr add dev eth0 10.0.0.1 netmask 255.<whatever> Something like that. -----Original Message----- From: Shawn [mailto:core@xxxxxxxxxx] Sent: Thursday, June 19, 2003 2:07 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Is this correct? I have a, iptables statement I would just like someone to say if I have it right. Let's say I have a linux box with eth0=10.0.0.250 and eth1=192.168.0.250, and there's a host (192.168.0.1) connected to eth1. I want to route connections from hosts in 10.0.0.0/24 land to 10.0.0.1 onto the linux box's eth0, and have them NATed to 192.168.0.1 Will the following statement do that? iptables -t nat -I PREROUTING -i eth0 -d 10.0.0.1 -J DNAT \ --to 192.168.0.1