hello, didn't you just forget the way back, from the webserver back to the client?? I think adding something like this: iptables -t nat -A POSTROUTING -s 10.30.143.1 -p tcp --sport 80 -j SNAT --to-source 10.30.142.12 might perhaps help I hope that I'm right CU