On Thursday 12 February 2004 12:47 pm, Moti Levy wrote: > iptables -t nat -A PREROUTING -p tcp -d $IP \ > --destination-port 5631 -j DNAT --to $IP_INTERNAL > iptables -t nat -A PREROUTING -p udp -d $IP \ > --destination-port 5632 -j DNAT --to $IP_INTERNAL > Or, translated to Mandrake's dialect of Shorewall rules: DNAT net masq:$IP_INTERNAL tcp 5631 DNAT net masq:$IP_INTERNAL udp 5632 -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@xxxxxxxxxxxxx