With ipchains you will need ipmasqadm http://juanjox.kernelnotes.org/ipmasqadm-0.4.2.tar.gz my settings: if [ -f /proc/net/ip_fwchains ]; then /sbin/ipchains -P forward DENY /sbin/ipchains -I forward -j ACCEPT -s <internal_ip/netmask> -d <internal_ip/netmask> /sbin/ipchains -A forward -j MASQ -s <internal_ip/netmask> -d 0.0.0.0/0 /sbin/ipmasqadm portfw -a -P tcp -L <external_ip> 80 -R <internal_ip> 80 fi Irakli