the rule set: iptables -t nat -A PREROUTING -d 5.6.7.8 -p 6 --dport 80 -j DNAT --to 192.168.x.x:80 worked perfectly thank you but i have a new question. i'm trying to setup so the users can access the machines through ssh. here is the rule set: iptables -t nat -A PREROUTING -d 5.6.7.8 -p tcp --dport 22 -j DNAT --to 192.168.1.88:22 the problem is when i ssh in to machine8 which is on static ipaddress 192.168.1.88 i actully log into machine1 which is 192.168.1.81, which is the first machine in the rule set. where did i go wrong? thanks john