Because the software your using is telling the server your connected to what your IP is. Much like FTP does and ICQ etc..etc.. which is why special connection tracking modules are required for those services. -----Original Message----- From: netfilter-admin@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx]On Behalf Of Bissio Sent: Saturday, July 05, 2003 2:28 AM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Source IP ADDRESS Hi all, I've a problem with masq... sometimes when i connect to pubblic chat or other web services from my lan, i see my source ip address (private network) listed. I would see my pubblic ip address listed... i use this rule: iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth1 -j SNAT --to public.ip.address and in FORWARD rule: iptables -A FORWARD -p tcp -i eth0 -o eth1 -s 192.168.0.0/24 --dport 1:1023 -j ACCEPT iptables -A FORWARD -p tcp -i eth1 -o eth0 -d 192.168.0.0/24 --dport 1024:65535 ! --syn -j ACCEPT Why my private ip addres (192.168.0.10) is listed instead my public address??? Thanks Bissio ______________________________________________________________________ Yahoo! Mail: 6MB di spazio gratuito, 30MB per i tuoi allegati, l'antivirus, il filtro Anti-spam http://it.yahoo.com/mail_it/foot/?http://it.mail.yahoo.com/