I need dissable routing to smtp servers, and enable smtp on non-standard port. Like this: -p tcp -s 192.168/16 -dport 25 -j DENY -p tcp -s 192.168/16 -dport 2525 -j TARGET_LIKE_SNAT --to $ext_if --to-port 25 don't change destination ip. possible? -- Sergiusz Różański rozanski.at.sergiusz.dot.com sq3bkn RTG project http://gg.overwap.net RMXF Postfix project http://rmxf.comm.pl