On Thursday 19 February 2004 8:25 pm, John Black wrote: > >I think you simply need to remove the "-d 161.x.x.x/21" from your rule and > > > >things will start working the way you want. > > just wanted to make sure this is right. > iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j SNAT --to > 161.x.x.x Yes, that's what I meant. > <iptables -t nat -L -n> gives me > > Chain POSTROUTING (policy ACCEPT) > target prot opt source destination > SNAT all -- 192.168.0.0/24 0.0.0.0/0 to:161.x.x.x A better command is "iptables -t nat -l -nv" because the v option also shows the interface names. Regards, Antony. -- I'm pink, therefore I'm Spam. Please reply to the list; please don't CC me.