On Sunday 12 October 2003 11:44 am, Mark E. Donaldson wrote: I don't think you have a versioning problem. Some of the more recent releases of netfilter are more sensitive about arguments and argument ordering I have found. Are you able to slip in a destination address into that rule: iptables -t nat -A PREROUTING -i eth1 -p tcp -d xxx.xxx.xxx.xxx --dport 6390 \ -j DNAT --to 192.168.10.245 It may be looking for a dest address. I have tried that before and here goes: iptables -t nat -A PREROUTING -i eth1 -p tcp -d 192.168.10.100 --dport 6390 -j DNAT --to 192.168.10.245 iptables: Invalid argument No luck. Cheers, -- Herman