On Fri, 2011-08-12 at 12:25 +0200, J. Zeidler wrote: > Hello > > I think you should use REDIRECT instead. > I don't know how to use it. Using it instead of OUTPUT does not work: I missed the udp protocol Jan mentioned: SSH doesn't do udp tunneling. There are tuturials on how to tunnel udp through an SSH tunnel using tools like netcat, but I'm not sure if you're if you're up for that and it's not something for this list either. > sudo iptables -A REDIRECT -t nat -p tcp -d 65.18.193.12 -j DNAT --to > 127.0.0.1:9999 > > How to use it? Read 'man iptables' again and search for REDIRECT. REDIRECT is a target, not a chain so the above rule is incorrect. Example: $ipt -t nat -A PREROUTING -p tcp -d <dest_ip> -j REDIRECT --to-ports <local_port> -- Rob -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html