On Mon, Aug 09, 2004 at 12:31:33PM +0100, Antony Stone wrote: > Exactly the same as your extisting PREROUTING rule, but you put it in the > OUTPUT chain instead (still in the nat table): > > iptables -A OUTPUT -t nat -d 1.2.3.4 -p tcp --dport 25 -j DNAT --to 10.10.10.2 As I said earlier that now I can access the mail server at 10.10.10.2 from the firewall machine using its external IP. But now I need to access the mailserver from the same machine itself using the external IP. How do I do it? Thanks a lot for the help in advance. With warm regards, -Payal