What Marshal said is correct. Although I use the following line from my iptables script using DNAT: ${IPTABLES} -t nat -A PREROUTING -p tcp -d ${shost} --dport ${srcport} -j DNAT --to-destination ${host}:${destport} Hope that helps -- Alex Nelson <anelson at ansoftcomputing.com> ANSoft Computing