Hullo :) Cutting to the chase, I'm moving a machine on IP 1.1.1.1 from our leased line in the office to a data centre at IP 2.2.2.2, and I'd like my firewall box on the 1.1.1.0 network to forward HTTP requests for the now non-existant 1.1.1.1 to 2.2.2.2 and act as an HTTP proxy, just for the few hours whilst the DNS updates... I realise that there will be lots of bandwidth wasted in shuffling duplicate data back and forth, but it really only is for a few hours and numbskill ISPs that ignore small DNS TTLs... Is this possible with iptables / SNAT / DNAT ? Cheers, Gavin.