Hi I'm going to setup a bridged NAT linux box for many users. I want one outside IP address to serve for instance 10.0.0.0/22. I want to be sure that each local IP address always has 1024 NAT sessions available and that sessions is kept even if the timeout is reached. If 1024 sessions is reached and a new session is being established then it will take over the oldest (timed out) session. Is this possible with iptables? - Martin