On Monday 15 March 2004 11:28, Antony Stone wrote: > iptables -A PREROUTING -p tcp --dport 80 -d old.ip.add.ress -j DNAT --to > new.ip.add.ress > iptables -A FORWARD -p tcp --dport 80 -d new.ip.add.ress -j ACCEPT > iptables -A POSTROUTING -p tcp --dport 80 -d new.ip.add.ress -j SNAT --to > my.ip.add.ress A thousand thanks, Antony - you're a giraffe among men - so walk tall :) Yep this works a treat, and you're quite right the fact that requests will all come from the firewall doesn't matter :) Cheers, Gavin.