is it possible to redirect incoming traffic onto some other machine's port, that is not publically accessible (private address), using only ipchains. if so, cool. if not, what other tools / methods are needed to accomplish this? thanks Sven