* Antony Stone <Antony@xxxxxxxxxxxxxxxxxxxx>: > Are you testing both SSH/10143 and HTTP/8888 from the same client machine out > on the Internet? Thanks for the tip. It works from outside. I tested only from "inside". Why does DNAT not work when trying from inside? The webserver is on 192.168.1.2. The DNAT and MASQUERADE rules have no specific source and destination interfaces defined. When I try from outside the port forwarding does work. Connecting from a PC inside trying with the outside address does not. I do not unterstand this behaviour. What document should I read? -- Kai Weber » kai.weber@xxxxxxxxxxx http://www.glorybox.de gpg-key: 0x594D4132