I'm having some problem getting DNAT to work on machines running 2.6 kernels. I tried both 2.6.2 and 2.6.6 and the show the same behaviour. I am using this iptables rule:L iptables -t nat -A PREROUTING -p tcp -d 194.109.254.66 --dport 8000 \ -j DNAT --to-destination 192.168.1.50:443 The destination is reachable from the router. But when I try to connect to 194.109.254.66:8000 a icmp port unreachable is returned and no connection attempt to 192.168.1.50 is made. Wichert. -- Wichert Akkerman <wichert@xxxxxxxxx> It is simple to make things. http://www.wiggy.net/ It is hard to make things simple.