(Please don't top post) J. Webster a écrit : > So, change it to this? > -A PREROUTING -d xx.xxx.xxx.199 -p tcp -m tcp --dport 443 -j DNAT --to-ports 1194 man iptables. DNAT expects "--to-destination <address>:<port>". > I had udp open as I was planning to change the vpn to udp in the near future. AFAICS you don't have UDP open in your filter rules, you just redirect it (useless as it will be dropped). -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html