On Tue, 2004-05-18 at 10:49, alucard@xxxxxxxxx wrote: > > [JAS - isn't the packet coming in on 10.73.219.156? In other words, your > > NAT rule should be: > > iptables -t nat -A PREREOUTING -d 10.73.219.156 -p 6 --dport 8080 -j > > DNAT --to-destination 192.168.0.2:80] > > -p 6? I've never seen this before, what is that rule trying to do? > <snip> Ah, I usually use the protocol numbers directly rather than the names of the protocols as it saves the lookup to the /etc/protocols file. 6 is the IP protocol number for TCP. It is the same as saying -p tcp but a little faster. The main point was the destination address appears to be wrong - John -- John A. Sullivan III Chief Technology Officer Nexus Management +1 207-985-7880 john.sullivan@xxxxxxxxxxxxx