I don't think you have a versioning problem. Some of the more recent releases of netfilter are more sensitive about arguments and argument ordering I have found. Are you able to slip in a destination address into that rule: iptables -t nat -A PREROUTING -i eth1 -p tcp -d xxx.xxx.xxx.xxx --dport 6390 \ -j DNAT --to 192.168.10.245 It may be looking for a dest address. -----Original Message----- From: netfilter-admin@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx]On Behalf Of Herman Sent: Sunday, October 12, 2003 12:41 AM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Invalid friggen argument Hi everybody, I am trying to get port forwarding to work. I had it working some time ago gawdknows what changed... Now, I get this result with iptables 1.2.7a-2mdk and with 1.2.9rc1: # iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 6390 \ -j DNAT --to 192.168.10.245 iptables: Invalid argument I can cut and paste a line from a howto and I still get 'invalid argument' - grrr... Any ideas? Cheers -- Herman