I want to do DNAT depending on the interface the packet is arriving to. If it is arriving on eth0, I want to do DNAT to IP0 If it is arriving on eth1, I want to do DNAT to IP1 If it is arriving on eth2, I want to do DNAT to IP2 .... Is it possible to use ipset hash:net,iface for this? How? If no, then is there some other better way of doing it apart from having N rules for N interfaces. Thanks and Regards, Akshat -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html