Hi!, I got an internal 192.168.0.0/24 LAN with about 5 web servers including the one which has iptables running and internet output ... in the firewall script: * INTERNALIF="eth1" * INTERNALNET="192.168.0.0/24" * INTERNALBCAST="192.168.0.255" * EXTERNALIF="eth0" * MYADDR="200.107.XXX.XXX" got a rule that works fine that forwards the mail packets to the 192.168.0.2 machine: $IPTABLES -A PREROUTING -t nat -i $EXTERNALIF -p tcp -d $MYADDR --dport 25 \ -j DNAT --to 192.168.0.2:25 $IPTABLES -A FORWARD -i $EXTERNALIF -p tcp -d 192.168.0.2 --dport 25 -j ACCEPT I have a couple subdomains pointing to MYADDR sub1.mydomain.com, sub2.mydomain.com, etc... What I need to do is: When someone in the Internet asks for http://sub1.mydomain.com/ respons the 192.168.0.3 machine (wich has a web server running port 80) When someone in the Internet asks for http://sub2.mydomain.com/ responds the 192.168.0.4 machine (wich has a web server running port 80) etc., etc., etc... I've tried something like this, but doesn't works !!! $IPTABLES -A PREROUTING -t nat -i $EXTERNALIF -p tcp -d sub1.mydomain.com --dport 80 \ -j DNAT --to 192.168.0.3:80 $IPTABLES -A FORWARD -i $EXTERNALIF -p tcp -d 192.168.0.3 --dport 80 -j ACCEPT Pliz give me a hand on this, thanks in advance ... ---------- don pool