Am Mon, 2003-08-18 um 04.41 schrieb Trevor Morrison: > I have a RH 9.0 with a 2.4.20 kernel. The box is running iptables-1.2.7 > and does NAT from my 192.168.1.x network to my ISP assigned dhcp IP. > What I would like to do is redirect a certain domain's email, DNS, or > Web traffic to a w2k server that sits in my private network, sort of > like a DMZ situation and have the another domain's services continue to > be routed to the RH box. On the RH box I am running Bind and Sendmail > amoung other things. You cannot do this using iptables. Iptables does not support the kind of application protocol filtering you need. You can only configure your Linux applications (bind/sendmail/apache) to do this. Cheers, Ralf -- Ralf Spenneberg RHCE, RHCX Book: Intrusion Detection für Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org