Ah; it needs to be done for each interaface? Or is there a more generic way of doing it? >>> Vineet Kumar <debian-security@virtual.doorstop.net> 08/07/02 01:31PM >>> * Janusz Ulanowski (janul@netten.pl) [020807 08:25]: > but it's working for incoming packets, from my localhost isn't work iptables -t nat -A PREROUTING -p tcp --dport 80 -i lo -j DNAT \ --to 192.168.0.1:8080 ..