Hi All, Is it possible to setup DNAT on single NIC? I am trying to setup DNAT in my DMZ machine to access local webserver(private UP) having single NIC and pulic IP with iptables -t nat -I PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to-destination 10.62.100.98:80 iptables -I FORWARD -i eth0 -p tcp -d 10.62.100.98 --dport 80 -j ACCEPT is it correct??, I can't access local(private IP) web server, if I remove the rules I can reach public IP DMZ machine from internet. thanks in advance, -bala- __________________________________ Do you Yahoo!? Yahoo! Mail - Easier than ever with enhanced search. Learn more. http://info.mail.yahoo.com/mail_250