Hello, In the kernel DNAT/SNAT module, net/netfilter/xt_nat.c, we have two xt_target objects to DNAT and two for SNAT. The revision field of them is "0" or "1". And for DNAT we have xt_dnat_target_v0() and as the target() callback for the object of revision 0, and xt_dnat_target_v1() for the object of revision 1. AFAIK, when adding a simple DNAT rule like: iptables -t nat -A PREROUTING -p udp --dport 9999 -j DNAT --to-destination 192.168.1.7-192.168.1.20 -i eth0 we use the xt_dnat_target_v0() My question is: in which occasion is the xt_target object of revision 1, xt_dnat_target_v1(), called ? can someone tell some iptables rule which will use xt_dnat_target_v1()? regards, Kevin -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html