On Friday 2008-04-18 12:55, Javier Prieto Martínez wrote: >> > You're right. I'll try again: > > * LAN1 (192.168.1.0/22) > > [CLIENTS]--- [ROUTER (.7)] > > > * LAN2 (192.168.2.0/22) > > [ROUTER (.7)] -- [APPLIANCE (.40)] -- SERVERS (.1&.2) > >> IF you do bridge, then despite cabling being correct, you get >> a NAT shortcircuit: jengelh.medozas.de/images/dnat-mistake.png >> > That's probably the problem, as far as I've seen with TCPDump. The point is, > how can I fix that shortcut? You do not seem to need a bridge. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html