On Sat, 2004-06-19 at 12:46, Postmaster wrote: > hello list-users, > > i want clean up my pre- and postrouting chains with rules like this: > > iptables -t nat -A PREROUTING -i eth0 -j first_group > iptables -t nat -A PREROUTING -i eth1 -j second_group > > iptables -t nat first_group -s a.b.c.d -d x/y -p tcp --sport > 1024:65535 --dport 10001 -j DNAT --to-destination 1.2.3.4:25 > iptables -t nat second_group -s a.b.c.d -d x/y -p tcp --sport > 1024:65535 --dport 10002 -j DNAT --to-destination 4.5.6.7:25 > > is there any modul which makes this possible? <snip> I'm not sure I see the problem other than adding an action to the user defined chain rules such as -A or -I - John -- John A. Sullivan III Chief Technology Officer Nexus Management +1 207-985-7880 john.sullivan@xxxxxxxxxxxxx --- If you are interested in helping to develop a GPL enterprise class VPN/Firewall/Security device management console, please visit http://iscs.sourceforge.net