On 01/25/2011 08:17 AM, Jatin K wrote: > but server is not forwarding the packets to the web server Besides the NAT rule, you'll need a forward rule (as that traffic is not for the machine hosting the firewall). I think you'll need something like: iptables -A FORWARD -d 192.168.131.131 -p tcp --dport 80 -j ACCEPT ...and of course check the firewall on the web-server to allow incoming TCP/80. -- Jorge -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines