On Friday 12 March 2004 9:46 am, Stanislav Puffler DiS. wrote: > Hi there, > > I need to forward all tcp packets with port 25 (SMTP) from Internet to > machine in my network. My settings (eth0 = internet IP, eth1 = > 192.168.200.1 - dmz IP connected to another machine with Postfix, eth2 = > 192.168.0.1 - gateway - LAN). Have opened port 25 and setup rule : > > iptables -t nat -A PREROUTING -p tcp -dport 25 - i eth0 -j DNAT -to > 192.168.200.2:85 That should be "--dport", not "-dport", and why are you changing the destination port number to 85? Is Postfix listening on port 25? > iptables -A FORWARD -i eth0 -p tcp -d 192:168.200.2 -dport 25 -m state > -state NEW,ESTABLISHED,RELATED -j ACCEPT That should also read "--dport", not "-dport", also "--state", not "-state". If you have typed out your rules in this email and made some mistakes, then please *cut and paste* your ruleset so we really know what is running. Regards, Antony. -- Ramdisk is not an installation procedure. Please reply to the list; please don't CC me.