On Thu, Apr 19, 2007 at 01:15:09PM +0200, G?sp?r Lajos wrote: > 2. You did not wrote but I assume you have a dynamically assigned IP > connection. (Line 22.) If it is true then I would specify in this line > the output interface: "-A POSTROUTING -s 10.10.0.0/255.255.255.0 -o > ???ppp+??? -j MASQUERADE" No it is a fixed ip. > 3. Line 23: ???? Why do you DNAT an outgoing connection back to you > ??? Maybe you do not need that line at all... I removed that - but still does not work. Any ideas? With warm regards, -Payal