[Screenshots] Looks like nothing is wrong. Another possibility is that your gateway's netmask isn't defined properly. When you want to contact the server, the client issues an ARP request to find out the Mac address of the destination, since the destination is on the same network as the client (source). It is quite possible that the gateway's netmask (something other than 255.255.255.0) makes it respond to this ARP, thinking that it should route this packet to the destination. In fact, try this one too: * From the client, access the webpage * From the server, check the access logs, and see which IP had accessed the particular webpage you did in the previous step. The two should be equal. But, what continues to baffle me is the fact that no requests were coming from your client's ethernet interface! -- Vimal -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html