Hi, On my gateway, I usually made a -A INPUT ... -dport 80 ... -j REDIRECT 192.168.x.y:80 In order to reach the webserver located on the LAN. What would be the difference if I use a DNAT instead? What's the diferences between those? -- Architecte Informatique: Administration Système, Recherche et Développement. Phone: +261 33 11 207 36 -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html