On Mon, 18 Aug 2003, david brant wrote: > I need to forward tcp port 80 to tcp port 8080 on the same box. The > machine does not function as a NAT box and has only a single interface. > Has anyone come across a rule that might help me out? Here's something to try: Suppose your machine is 192.168.0.1. iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT \ --to-destination 192.168.0.1:8080-8080 In other words, you do an identity transformation of the IP address, but jigger the port. It might work :-) The big question is, if there are multiple connections at once, will there be a problem that there is only one destination port in the range? James F. Carter Voice 310 825 2897 FAX 310 206 6673 UCLA-Mathnet; 6115 MSA; 405 Hilgard Ave.; Los Angeles, CA, USA 90095-1555 Email: jimc@xxxxxxxxxxxxx http://www.math.ucla.edu/~jimc (q.v. for PGP key)