On Tue, September 27, 2005 02:17, David Leangen wrote: >> What do the byte counters for this rule say when you execute : >> iptables -nvL PREROUTING > > Hmmm... weird... > [root@sannomiya ~]# iptables -nvL PREROUTING > iptables: Table does not exist (do you need to insmod?) Not at all ; my mistake : I forgot to add "-t nat" in the rule. > I tried that. Apparently, the packets get routed to 192.168.2.1 as > expected, so they must be getting eaten up by my iptables... I'll > take another look to try to figure out why. Check out Jörg's reply. If the setup in his reply represents yours, is it really necessary to do NAT for 192.168.1.0/24 to reach 192.168.2.0/24 ? I'd say you should be able to reach 192.168.2.0/24 using routing only (when FORWARD policy is ACCEPT and doesn't do filtering and ip_forward is set to "1"). Gr, Rob