On Mar 1 2007 09:09, dhottinger@xxxxxxxxxxxxxxxxxxxxxx wrote: >> > > >> > > $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j >> > > LACCEPT >> > > $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j >> > > LACCEPT >> > > $IPC -A TOSERVERS -p tcp --dport 9011:9015 -d 204.111.40.10 -i $L3 >> > > -j LACCEPT >> > > $IPC -A TOSERVERS -p tcp --dport 10000 -d 204.111.40.10 -i $L3 -j >> > > LACCEPT This is just filtering. If you do not want things to be NAT'ed, do it in the nat table. Jan --