On Tue, 2004-09-28 at 06:21, hamals@xxxxxxxxxxx wrote: > I have a big problem > > I have a web server in my DMZ, I reach it with his > internal IP 192.168.1.10 from my internal LAN, but I can't > reach them with his public IP. > > I did a DNAT and from internet everythings is ok, my web > server is working in right by DNAT. > > Where is the problem? are you asking how to connect to the web server from the inside by its public IP address? if so, you just need another DNAT rule, probably: iptables -t nat -A PREROUTING -i $INSIDE_IF -p tcp -d $WWW_PUB_IP \ --dport 80 -j DNAT --to-destination 192.168.1.10 -j -- Jason Opperisano <opie@xxxxxxxxxxx>