On Wednesday 02 February 2005 16:57, Hervé wrote: > Basically, the network interface where the packet originated has to > somehow be remembered at the routing stage. I only see source address > mangling to do that... > It would seem that if you add two additional IPs to the NFS machine (on a dummy interface) and do a local DNAT to those IPs based on the incoming nic, that the correct routing tables/rules would be all that is needed to route the return packets to the correct network. Have a look at http://www.policyrouting.org/PolicyRoutingBook/ONLINE/TOC.html for the concepts and examples. Chapter 5, in particular, covers the routing concepts your solution will need. Note that ProxyARP uses the same ip on two interfaces and depends on the proper routing table entries to do the right thing. -- Bob Tellefson Java network application development & hosting