> Mike <mikef1007@xxxxxxxxx> wrote: > >> iptables -t nat -A PREROUTING -p tcp --dport portX -j DNAT --to :portY > > You want -j REDIRECT rather than DNAT Paul, Thanks for your reply. I tried the following, prior to that i flushed iptables. iptables -t nat -A PREROUTING -p tcp --dport X -j REDIRECT --to-ports Y I ssh from another box, into the box I issued the above iptable tcpdump only showed traffic on port X and nothing on port Y thanks, -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html