Sorry, previous email was incomplete. This should work. /iptables -t nat -A PREROUTING -i eth1 -d 192.168.2.1 -p tcp --dport 10329 -j DNAT --to (the real server IP):(port) regards edmund -----Original Message----- From: netfilter-admin@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx] On Behalf Of Edmund Turner Sent: Monday, November 03, 2003 3:00 PM To: 'Martín'; netfilter@xxxxxxxxxxxxxxxxxxx Subject: RE: Configuration question... Martin, You can use a prerouting : Assuming you want to connect to a tcp port 10329 on the linux machine. /iptables -t nat -A PREROUTING -i eth1 -d 192.168.2.1 -p tcp --dport 10329 -j DNAT --to (the real server IP) regards edmund -----Original Message----- From: netfilter-admin@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx] On Behalf Of Martín Sent: Monday, November 03, 2003 12:48 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Configuration question... This is the situation: I hace a linux machine, giving internet access to a win98 machine. The win98 machine has a soft wich does not accept NAT, so the soft does not work when has to connect to internet. Linux: eth0 (wich is conected to the adsl modem > ppp0 ) 192.168.1.10 eth1 (interface conected to the LAN, IP 192.168.2.1) Win98: IP 192.168.2.5 What I need to do is: make the win98 software believe that it is connecting to a server service in the linux machine to port 10329, and that traffic has to be redirected to an external Ip in internet (the real server with the service in port 10329). And the, the traffic comeing fron that server has to be redirected to the win98 machine but with the source IP changed to 192.168.2.1 (the internal IP of the linux) Can tell me the comands to configure the linux and iptables to do this? Thanks