> I added the rule: > > iptables -t nat -A PREROUTING -i eth0 -d 4.3.2.1 -j DNAT --to 1.2.3.5 > Drop the interface option, internal vserver traffic doesn't come from eth0. iptables -t nat -A PREROUTING -d 4.3.2.1 -j DNAT --to 1.2.3.5 Phil