Hi Andy, > Have you tried configuring the interface using iproute2 instead? > > Something like: > > ip address add a.b.c.241/29 dev $WANIF broadcast a.b.c.247 Thanks for your advice... but still no dice... ? I now have: ip address add a.b.c.240/29 dev ppp0 broadcast a.b.c.247 iptables -t nat -I PREROUTING -d a.b.c.241 -j DNAT --to-destination 192.168.1.69 iptables -t nat -I POSTROUTING -s 192.168.1.69 -j SNAT --to-source a.b.c.241 iptables -t nat -A PREROUTING -d a.b.c.242 -j DNAT --to-destination 192.168.1.100-192.168.1.150 iptables -t nat -A POSTROUTING -s 192.168.1.100-192.168.1.150 -j SNAT --to-source a.b.c.242 The .69 machine correctly has .241 ... however the machines located in the range do not have .242 ? Is this is correct way to specify a nat range with iptables? Cheers, Andrew. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html