Hello, I am trying to understand how to use rules with PREROUTING and transparent proxy. In documentation it is said: "6.2 Destination NAT This is done in the PREROUTING chain, just as the packet comes in; this means that anything else on the Linux box itself (routing, packet filtering) will see the packet going to its `real' destination. It also means that the `-i' (incoming interface) option can be used." What does `real' destination means here ? Does it mean that the packet is transfered to the new destination according to the rule given for PREROUTING ? for example, In case of transparent proxy : iptables -t nat -A PREROUTING -p tcp -s 192.168.201.0/24 --dport 80 -j DNAT --to 192.168.201.250:3128 Does it mean that the transparent proxy will be the end destination of the packet ? I am new with iptables. Thank you, Ran -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html