Hi, >We have a need to "alias" portions of a customer's internal private IP >network, because they have an address range which overlaps a private IP >address range used internally in one of our systems installed at their >site. We are trying to avoid having to re-IP either network. I haven't tried it, but it seems there's stateless nat available as tc action. You *probably* could try to do dnat on egress (eg. interface eth0) and snat on ingress (ingress qdisc attached to eth0). # tc action add action nat help Usage: ... nat NAT NAT := DIRECTION OLD NEW DIRECTION := { ingress | egress } OLD := PREFIX NEW := ADDRESS Best regards, Marek Kierdelewicz -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html