On Thursday 15 January 2004 12:08 am, Jerry Rasmussen wrote: > When I try to add a command with eth1:1 get this error 'iptables -t nat > -A PREROUTING -p tcp -i $ex_dev -d 216.27.xxx.xx --dport 3389 -j DNAT > --to 192.168.xx.xxx > Warning: wierd character in interface `eth1:1' (No aliases, :, ! or *)." > > I have done a good bit of Googleing I am sure there is an easy answer > that I am missing You are correct. The easy answer is: "leave out the :1 on the interface name". Multiple IPs are still bound to one real interface (this is more obvious if you use the recommended ip addr command instead of ifconfig eth1:1), and your netfilter rules should simply refer to the real interface which the packets come in on. Antony -- This email was created using 100% recycled electrons. Please reply to the list; please don't CC me.