Per Jessen wrote: > Patrick McHardy wrote: > >> DNAT is terminal, so you need: >> >> rule 1: --every 2 --packet 0 >> rule 2: unconditional >> > > Thanks Patrick! Just what I needed. Hmm, I can't help wondering what the issue is in my second rule: rule 1: --every 2 --packet 0 rule 2: --every 2 --packet 1 Why aren't they hit in a sequence of 1-2-1-2-1-2-1-2 etc ? /Per Jessen, Zürich -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html