Ah, ok. Well: my gateway is 192.168.64.1 and also runs the timeserver so I'm doing only DNAT here then?
Try redirect first, it should work. See my previous post.
Regards, Dimitar
-- "The only thing necessary for the triumph of evil is for good men to do nothing." --Edmund Burke.