>> $IPT -t nat -A POSTROUTING -o eth2 -s 192.168.111.0/24 -j MASQUERADE > >MASQUERADE will not work with dual routing. Does it really? AFAICS it asks the routing code to "route this for me and tell me what interface it would hypothetically go out" and takes the ip of the outgoing iface. Jan Engelhardt --