Hi All I am new to Iptables & Firewall. I have 2 servers (web & email) running behind firewall. I have DNAT rule on my firewall, so any request hitting on port 25, 80, 110 are DNAT to internal servers. Inturn my internal servers (web & email) feel these requests were received from firewall ie internal ip and can be trusted. I want these DNAT request to be forward with their original ip address and not as coming from firewall ip. Please advice my firewall rule is as follows : iptables -t nat -A PREROUTING -p tcp -i eth1 --dport 25 -j DNAT --to 192.168.0.175:25 Regards Joel