If it had a route then it would throw it if it had no DNAT rule, but you do so it'll translate the DEST IP to 192.168.0.1 before it dropped it. And if you had a route then you wouldn't require the "ip addr add" command either.. Thanks, ____________________________________________ George Vieira Systems Manager georgev@xxxxxxxxxxxxxxxxxxxxxx Citadel Computer Systems Pty Ltd http://www.citadelcomputer.com.au Phone : +61 2 9955 2644 HelpDesk: +61 2 9955 2698 -----Original Message----- From: Shawn [mailto:core@xxxxxxxxxx] Sent: Friday, June 20, 2003 12:30 PM To: Daniel Chemko Cc: netfilter@xxxxxxxxxxxxxxxxxxx Subject: RE: Is this correct? It wouldn't throw it away if it had a route for it, would it? Since linux-router/eth1 has 10.0.0.250/24 assigned, wouldn't it forward out that one?