2009/7/14 Thomas Jacob <jacob@xxxxxxxxxxxxx>: > You need to switch on forwarding though, I guess that is what is > missing. Otherwise your system will just drop the packet after > the Prerouting changes. > > i.e : echo 1 > /proc/sys/net/ipv4/ip_forward > > I've just tried these rules for myself again, and they work nicely. (sigh) forwarding is always on. It is enabled at boot time in /etc/sysctl.conf Maybe I should examine more carefully the INPUT and FORWARD chains of the filter table. They are configured to allow inbound traffic to port 10025 and to allow forwarding to port 25. Are there any other requirements? Is there any means to "debug" or to "see" how a packet traverses the chains and tables? Thanks! -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html