On Wed, 2002-10-30 at 13:29, Michael Schwendt wrote: > iptables -I RH-Lokkit-0-50-INPUT 5 -p tcp --dport 80 -j ACCEPT > > I don't know why I reply to this message. :) You should also tell > where 192.168.105.220 is located. I need to guess too much. A rule > in the FORWARD chain would be necessary if 192.168.105.220 is a > remote host. It seems it isn't. You are replying to this message because you are a very cool person who is trying to help someone ;) OK, this is the schema: My computer has two network cards; eth0 has a real, public and valid IP address. eth1 has a private address (192.168.1.169). What I am trying to to is to route the port 80 from the public network to a computer (192.168.105.220) in the private network. To achieve this, I just set up the firewall with lokkit and then added the two rules commented before: iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to 192.168.105.220:80 iptables -I RH-Lokkit-0-50-INPUT 5 -p tcp --dport 80 -j ACCEPT But still can't reach port 80 from public network. I even tried stopping iptables and then only use the two rules above, without luck :( What do you advise me to do? Thanks again. -- ˇSé libre, usa software libre! Be free, use free software! http://www.imoqland.com/ -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list