Hi Folks To redirect lan traffic addressed to the wan IP (e.g.) 123.456.789.012 to the lan IP address 192.168.1.123, I'm using the following: $ iptables -t nat -I PREROUTING 1 -d 123.456.789.012 -j DNAT --to-destination 192.168.1.123 But, all internal traffic seems to get lost - 18 months ago when I last did this, traffic to 123.456.789.012 seemed to hit 192.168.1.123 and come back without problem. I've added the following, with some interesting results: $ iptables -t nat -I POSTROUTING 1 -s 192.168.1.40 -j SNAT --to-source 58.28.20.69 Now, the traffic from the specific lan IP 192.168.1.123 does seem to be redirected correctly and come back to itself. But still, all other lan traffic seems to get lost. Any ideas what's happening, where I'm getting lost? Regards, Morgan. -- Getting errors: "There are problems with the signature" (or similar)? Update your system by installing certificates from CAcert Inc, see here: http://wiki.cacert.org/wiki/BrowserClients?#head-259758ec5ba51c5205cfb179cf60e0b54d9e378b Or, if Internet Explorer is your default browser, simply click this link: http://www.cacert.org/index.php?id=17 Morgan Read NEW ZEALAND <mailto:mstuffATreadDOTorgDOTnz> fedora & freedom; fact || fiction? http://fedoraproject.org/wiki/Overview get freed-ora! http://www.fsfla.org/svnwiki/selibre/linux-libre/freed-ora -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html