>uh--where are the "allow incoming connections to my web servers" lines? > -A FORWARD -i eth0 -o eth1 -p tcp --syn -d 192.168.0.2 --dport 80 \ > -j ACCEPT > >-A FORWARD -i eth0 -o eth1 -p tcp --syn -d 192.168.0.3 --dport 80 \ > -j ACCEPT > >make sure you also enabled IP forwarding: > > sysctl -w net.ipv4.ip_forward=1 The iptables start up script enables forwarding, but you were right I was missing the "allow incoming connections to my web servers" lines. Thanks James! >are these webservers goingto be part of a cluster or do they need to have there own resolved >hostnames? >are they to be part of virtual hosting scenario ? No, they are not in a cluster or anything fancy like that. These are just stand alone web servers serving their own content that need to be isolated from the rest of our network, but need to have their own (current) hostnames resolved. I don't see what more information I can provide. The set up seems to be working fine after I added the lines suggested by James. I'll report back if I encounter problems. piranha, Would you mind telling what are the other ways to do this? Keep in mind that I can't touch the DNS server. Thanks again. -gui
