On Fri, Mar 30, 2007 at 05:04:49PM +0100, Mark McLoughlin wrote: Go for it. There is one further fixup needing for the forwarding stuff in the scenario where you specify an explicit device. I don't know exactly what I was thinking when I first wrote it, but the iptables rules are clearly wrong. You can't forward to a specific device just by adding --out <dev> as you rightly pointed out. The only reason it worked for me was that the two devices I was testing with were both ultimately on the same LAN. Anyway, what I intended it to do is to use DNAT & SNAT rules along with the IP address associated with the particular device being targetted. Yes this only works with static networking, but that's all it was intended to do anyway - we already have the generic forward capability for dynamic networks. I'll try and cook up a patch to fix this properly... I've also got a long writeup pending about the (sorry) state of IPv6 networking and what we can do with it :-) Dan. -- |=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=| |=- Perl modules: http://search.cpan.org/~danberr/ -=| |=- Projects: http://freshmeat.net/~danielpb/ -=| |=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|