Hi, Oh, I've finally moved my firewall/NAT to a seperate box than my desktop. My network looks like this now: | [mail 192.168.0.1] 206.147.x.x 192.168.0.100 | [www 192.168.0.10] -DSL--[Firewall]------[Switch]----| [workstation a 192.168.0.20] | [workstation b 192.168.0.21] Now, the NAT thinggie is port-forwarding stuff over to the internal network. For example, www.yaron.org is DNSed as 206.147.x.x. The firewall forwards port 80 to the internal 192.168.0.10. This all works fine, except from th internal network. The firewall does NOT redirect stuff coming in from the internal net. I've got a couple of workarounds - /etc/hosts or hosts.txt files on the workstations, or setting up an alternate DNS for the internal network, but I'd like to have the firewall do it's thing. I'm using ipchains 1.3.9 and ipmasqadm 0.4.2, on kernel 2.2.16. IPCHAINS is ACCEPTing the packets from the internal net, but then they vanish. Here's the IPCHAINS rule: ACCEPT tcp ----l- anywhere beldaren.yaron.org any -> www And ipmasqadm: TCP beldaren.yaron.org dragon.yaron.org www www 3 10 Anyone? -Yaron -- --------------------------------------------------------------------- To unsubscribe, e-mail: tclug-list-unsubscribe at mn-linux.org For additional commands, e-mail: tclug-list-help at mn-linux.org