2009/7/14 Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>: > man iptables > DNAT is a terminal target, so after a match the next rules in the chain are > not examined. Thanks for pointing that out. I didn't know about this. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html