> > Maybe these lines will help you... :) But if not.... :D > > $IPT -t nat -A POSTROUTING -j SNAT -p tcp --dport www -d $WWW > --to-source $MY_IP > $IPT -t nat -A POSTROUTING -j SNAT -p tcp --dport www -d $WWW > --to-source $MY_IP > well, the packets can be send out with two different IPs - depending on which ISP the connection came from - so this would just bind all connections to one of the IPs making it impossible to have a connection from the other one. no, i am pretty sure the snatting must be done automatically based on contrack entries. Marek