>I have set up a vpn (openvpn) from my home computer to a remote server, I have several >unused public IPs on the server and I would like to know how to transparently send all >traffic from e.g 123.123.123.123 (one of the spare public ips) to 10.8.0.2 (the vpn ip >of my home machine), and vice versa i guess. % iptables -t nat -A PREROUTING -s $VPNIP -j SNAT --to-source $PUBIP % iptables -t nat -A POSTROUTING -s $PUBIP -j DNAT --to-destination $VPNIP That should do the trick for you for a general NAT, I'd suggest adding filtering, etc. -- Jason Faulkner Linux Systems Engineer Mailtrust, a division of Rackspace -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
