> iptables -t nat -A PREROUTING -i ! $DMZIF -p tcp --dport 80 > -j DNAT --to 192.168.10.2
> iptables -A FORWARD -p tcp -d > 192.168.10.2 --dport 80 -j ACCEPT The correspondign SNAT should be: Iptables -t nat -A POSTROUTING -p tcp -s 192.168.10.2 --sport 80 -o ! $DMZIF -j SNAT --to-source 10.10.10.12 ... Or something like this ;o) man iptables should help. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
