On Thu, 04.09.03, Gareth Hastings <Gareth.Hastings@xxxxxxxxxxx> wrote: > firewall have public addresses. Now I would like to add a port forward rule > that sends all incoming mail to another IP address. I am not sure what I'd > need to do. I didn't think SNAT or DNAT were needed here as no NAT is > happening. Anyone have any ideas? Do I need to mangle the destination > address? If you send packets to another IP address why exactly is that not DNAT? Try: iptables -t nat -A PREROUTING -p tcp -d $fw_ip --dport 25 -j DNAT --to $target:25 cya, Nils