we have few clients connected in LInux firewall switch ---- firewall--------internet | | | 200pcs | pvtip pubip all -- * * 0.0.0.0/0 0.0.0.0/0 SMANG --to-ip <PUBLIC IP> -A FORDNS -j SMANG --to-ip PUBLIC Ip while sending a request to DNS we are using (mangle.) client's source port . the same port we are using to send a request to dns. while coming back. assume that 3 person used the same port. DNS return traffice not going to respective client. can anyone please advise. it was working fine with nat. we are right now using mangle Regards TM