Thank you very much Jason, Jose, Aleksandar, and Ложечник for all the replies. I chose the simplest suggestion (putting drop rule before redirect in nat prerouting chain), and now it works perfect. You guys are great. Jinsuk Kim _______________________________ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com