Hi, the DNAT target seems to be only valid in the nat table. As such, something like "telnet localhost 8000" (where iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT 192.168.1.17:80) does not work. What is the correct solution -- besides rinetd -- to do this kind of forwarding? Jan Engelhardt -- ENOSPC