I can't help feeling that this question must be answered in the archive somewhere but I couldn't find it. I am successfully using MASQURADE. But the diagnostics only allow me to see my RULE when I actually want to see the dynamically created mappings! Is there a command to do this? e.g. display something like: Inside. Outside (eth0) 192.168.1.5:4000 -> 203.0.113.5:4000 192.167.1.6:4000 -> 203.0.113.5:1024 I would imagine the developers needed something like this while debugging it. Thanks for your help.