>Why do I need to patch sshd on faketarget? What I'm trying to do is just >send all the packets to realtarget, essentially untouched (other than the >destination IP). I don't understand why sshd on faketarget would even be >involved...? Then just use DNAT. Jan Engelhardt -- | Alphagate Systems, http://alphagate.hopto.org/