Hallo Yan, On Fri, 31 Oct 2003 11:59:25 -0700 "Han, Yan" <hany@xxxxxxxxxxxxxxxxxxxxx> wrote: > > > # what is wrong ?? > > iptables -t nat -A PREROUTING -i eth0 -p tcp -d 150.135.44.245 --dport 80 > -j > > DNAT --to 150.135.45.96 > > >> what does "iptables -t nat -L -n -v" show? Is the counter (first column) > increased every time you try to connect your webserver? > > Yes! It does. The "pkts" increases once I try to connect the address > 150.135.44.245. I think it is correct that destination "150.135.44.245 > tcp dpt:80 to:150.135.45.96". Any idea? can you try to sniff (e.g. with tethereal or tcpdump) the traffic on the interface to the webserver? If the packets leave the interface, then there should be a problem with the webserver or with the routes. Jörg -- Jörg Schütter http://www.lug-untermain.de/ joerg@xxxxxxxxxxxxx http://www.schuetter.org/joerg/ ICQ: 298982789 http://mypenguin.bei.t-online.de/