On Tuesday 18 May 2004 3:49 pm, alucard@xxxxxxxxx wrote: > > [JAS - isn't the packet coming in on 10.73.219.156? In other words, your > > NAT rule should be: > > iptables -t nat -A PREREOUTING -d 10.73.219.156 -p 6 --dport 8080 -j > > DNAT --to-destination 192.168.0.2:80] > > -p 6? I've never seen this before, what is that rule trying to do? It's a slightly unconventional way to specify TCP :) Protocols have numbers (after all, *everything* has numbers when a computer gets involved...), and TCP happens to be protocol number 6; UDP is protocol number 17, and ICMP is protocol number 1. See /etc/protocols on your own machine for more examples. Regards, Antony. -- There are two possible outcomes: If the result confirms the hypothesis, then you've made a measurement. If the result is contrary to the hypothesis, then you've made a discovery. - Enrico Fermi Please reply to the list; please don't CC me.