> They originate in the middle top of the graph. They only go right, they never go > left, where the PREROUTING chains are. Ah, I was naively starting all packets at the (start) box. That makes a lot more sense. Thank you! My workaround (copy all nat:PREROUTING rules bit-for-bit to nat:OUTPUT) is pretty skanky though... Does anyone have a suggestion for a better way to solve this? Thanks again! - Scott -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html