hi.. i want to make a new target that works like SNAT, but M:N SNAT.. i mean, there are 50 computers and each has a private ip like 192.168.0.x.. 10 computers need a specific ip of my 50 real ip. so, i want that computers to give given range IPs, and another computers follow anoter iptables rule. for example, i have 1.1.1.1~1.1.1.50 ip, and 1.1.1.1~1.1.1.10 is special IPs.. and my 50 computers has a private network, 192.168.0.1~192.168.0.50, some computer that need specific IP assign ( range 1.1.1.1~1.1.1.10 ) and another 40 computers just follow other iptables rule.. (like, iptables -t nat -A POSTROUTING -d 192.168.0.1-192.168.0.50 -j NEWTARGET --to 1.1.1.1-1.1.1.10 and, if all 1.1.1.1-1.1.1.10 are used, other private computer follow another rule.. ) i checked ipt_NETMAP.c, just my thought, make a newtarget likes NETMAP with idea like ip pool, but i don know how to pass the next rule if all 1.1.1.1-1.1.1.10 are used. if there is no IP, just return NF_ACCEPT ? ;; does I make a sense? please help me... -- ----------------------------- +82-10-3161-0419 (Korea,South) jinhyung@xxxxxxxxx -----------------------------