On Mon, Nov 10, 2008 at 2:26 PM, Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx> wrote: > With out knowing any thing about what "... the web interface ..." is I can't > say any thing about where you are at. > > However your rules look like they are doing the DNATing (presuming that your > ""external IP is 192.168.2.2) properly (presuming that 192.168.1.<something> > is your internal IP). However you are not doing any SNATing to hide the > fact that your internal LAN clients are being redirected back to the the > internal server when they try to reach the external IP. OK.. Ive got it. I changed the external interface to PPPoE and also changed from IPCOP to Endian firewall. In Endian, there is a nice pretty GUI with a "Enable SNAT" checkbox. ohh Ahh its working! Thanks for your help anyways, i learnt some more! Simon -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html