I would like to set up a Linux router with two NICs, one connected to the public Internet and the other NIC having the IP address 192.168.1.1 connected to a private 192.1.68.1.0/24 network. The routing would be arranged so that all incoming packets from the public network with TCP port 80 (ie, web traffic) are forwarded to a webserver on the private LAN with IP address 192.168.1.2 - so far so good and this can be done with DNAT. But, I want all the packets received by the webserver to appear to be coming from the address 192.168.1.1, not the external public IP address they really came from, eg the apache logs will show all page requests as coming from 192.168.1.1. Can this be done with iptables? Andy -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html