Grant, Firstly thank you for your reply! Currently i have a rule in my firewall that DNATS to the client machine, I'm guessing that i will also need to DNAT that single packet but im not sure where to place the rule. could i use the two rules you gave me with this additional one: iptables -t nat -A PREROUTING -i ${INet} -p udp -m recent --rcheck --seconds 60 --name WSWE8 -- source -j DNAT --to-destination $CLIENT_IP thank you again, -steve