<citaat van="Constantine Filin"> > Now if I delete the conntract entry again, NAT table packet counter will > increment > again but I need to setup iptables so that *all* packets from > 85.141.210.22:9000 > are NATed, not only the first one opening the conntrack entry. > > Is there a way to do this with iptables? If not then what is the purpose > of NAT table? > What is the right way to use it? A NAT rule is hit once, to set up a NAT mapping. With this mapping, all packets belonging to this connection are NATted. So the right way is just to create one nat rule, like you did. M4