hi there, recently i read iptables man page, in the DNAT part : You can add several --to-destination options. If you specify more than one destination address, either via an address range or multiple --to-destination options, a simple round-robin (one after another in cycle) load balancing takes place between these adresses. in my mind, it sounds like: iptables -t nat -A PREROUTING -s xxx.xxx.xxx.xxx -p tcp --dport 80 -j DNAT --to-destination aaa.aaa.aaa.aaa --to-destination bbb.bbb.bbb.bbb but it says invalid arguments. which part was wrong ? cheers, Agung __________________________________ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs