Adam I was looking at this to solve another problem, but it may help you solve yours? http://l7-filter.sourceforge.net/ Kirk ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ On Sun, 2007-04-29 at 07:42 -0600, Adam wrote: > I am wondering weather this is possible. I have one port and one public IP > address lets say: > > 34.123.22.33:5615 > > If I connect using SSH I want to DNAT to port 22, if I connect using SSL I > want to DNAT to port 443, if I connect using HTTP I want to DNAT to port > 80. > > If this kind of upper layer protocol determination possible? If so, is > netfiter the application to do it? > > > >