Hi, I am currently facing a chicken-egg kinda problem and I was wondering whether you guys would be able to help me on that one. My setup is as follows: Inet -> Host a.b.c.d (providing SSH, HTTP and DNS services) -> several VServers, 10.0.1.x (all providing SSH and HTTP as well) So set up PRE- and POSTROUTING rules and I was able to transparently access the 10.0.1.x network. However of course I am not able to access the SSH and HTTP servers on the host itself anymore because iptables can not differentiate between the SSH and HTTP server provided by my host with the (one and only) public IP address and those servers provided by the Vserver the host also acts as a DNS server for. Can anybody point me to feasable solutions to this problem because I don't want (or actually I simply can't) to use more than public IP address on the host. Anyone? Might that be possible with advanced routing maybe? Thanks a lot. Bye, Werner