James Pifer wrote: > Just to clarify. Single port. For example: > > x.x.x.x:8000 to y.y.y.y:8000 > z.z.z.z:8000 to y.y.y.y:8000 > Then Rodrigo's "-t nat" lines would be all you need. The five "-A FORWARD" lines would be an option depending on if you wanted to limit connection to *only* a certain group of hosts. Don't forget to set the default policy for each chain with "iptables -P". Kirk