On Sun, 11 Apr 2004, Syed Faisal Gillani wrote: > is it possible in iptables to FW a port traffic (eg 80) to an internal = > ipaddress of a webserver ? Hi, it's called NAT (network address translation). iptables -t nat -A PREROUTING -p tcp -d your.external.addy --dport 80 -j DNAT --to your.local.addy:80 Maybe you should have a look at http://netfilter.org/documentation/HOWTO//NAT-HOWTO.html regards Frederic -- < Ylli> lol je rigole neuro jte prend pa pr un pervers ms un president et pere de famille respectable :s http://www.seclab.jp