> If you use iptables as firewall, add this rule: > /sbin/iptables -t nat -A PREROUTING -p tcp -s xxx.yyy.zzz.ttt --dport \ > 10022 -j DNAT --to-destination 192.168.0.10:22 > the instruction -p tcp -s xxx.yyy.zzz.ttt is not necessary, it is only > if you allow a given machine to log on your gateway. > You can add in your .ssh/config file: > Host name-of-machine-behind-gw > HostName name-of-gateway > HostKeyAlias name-of-machine-behind-gw > Port 10022 > and just type ssh me@name-of-machine-behind-gw Thanks! That sounds great! Przemek -- AIKIDO TANREN DOJO - Poland - Warsaw - Mokotow - Ursynow - Natolin info: http://www.tanren.pl/ phone: +48506613147 email: dojo@xxxxxxxxx