>Can you DNAT packets to IPs X, and Y, Z assigned to a bridge, while bridging >those IPs not assigned to it? I don't get it from your description, but DNATing packets that will be bridged after DNAT rather than routed will not work. >(There is probably going to be a small amount of firewalling on the bridged >IPs) Jan Engelhardt --