Derick Anderson wrote: > Uneducated, lazy guess: the SNAT target supports only one "--to [IP]" > and the command parser ignores the extraneous "--to [IP2]". You can test > this by switching the two IPs and see if you go out on a different > address. Nope! >From "man iptables": "...You can add several --to-source options. If you specify more than one source address, either via an address range or multiple --to-source options, a simple round-robin (one after another in cycle) takes place between these adresses."