Will the order of the following two rules make any difference in the outcome ? I personally feel that it should not. Can anyone confirm ? My intention is to have the incoming mails first checked by the local anti-spam process listening at port 1025 before being forwarded to the local mail server. 10.1.1.100 is a private ip address of the local mail server. Local Mail server ----- [eth0] LinuxBOX [eth1] ---- internet iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 25 -j DNAT --to 10.1.1.100 iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 25 -j REDIRECT --to-port 1025 -Will __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com