-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Jan, Em 17-02-2011 16:03, Jan Engelhardt escreveu: > eth0:0 is not an interface. That is ifconfig misleading you. Avoid this > old and unmaintained tool. Thank you so much for your quickly reply and tip. I change the configuration according to your tip and I use "ip addr add" to add a secondary ip address (the target IP for DNAT), but unfortunately that does not help: the packets are still going to INPUT chain, even with the DNAT rule changing the DESTINATION of the packet. Kind Regards, Italo. - -- Saudações, Italo Valcy :: http://wiki.dcc.ufba.br/~ItaloValcy -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk1ddFoACgkQfidLqjN6RNGBWgCfbva8mT/PyPkmzGg+OM1+lOad UKkAniJ5wzWi2vq9qPsJAKuwpAStiTZx =knvD -----END PGP SIGNATURE----- -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html