On Sunday 18 July 2004 10:34 am, gene bene wrote: > I have a print job in my network which comes in on port 10001 raw packets > (from a citrix server) > > I need to use iptables to translate the port number to 9100 > > I have tried to set up a virtual ip (eth0:0) and use DNAT and SNAT to > translate the port with no success. > > Can anyone help me with the correct settings? Apply this rule on the machine receiving the packets: iptables -A PREROUTING -t nat -p tcp --dport 10001 -j DNAT --to :9100 (Assuming you meant they are TCP packets; if they're UDP just change the rule in the obvious manner). Regards, Antony. -- This email was created using 100% recycled electrons. Please reply to the list; please don't CC me.