> > - for packets which have a source address in the range 192.168.0.0/24 > - and are going out of interface eth0 > - and have a destination address in the range 161.x.x.x/21 >translate the source address to 161.x.x.x > >Any other packets (eg: ones with a destination address of the netfilter >website server) will not match this rule, and will not be translated. > >I think you simply need to remove the "-d 161.x.x.x/21" from your rule and >things will start working the way you want. > >Regards, > >Antony. thanks i will try it when i get to work. john http://www.arbbs.net/