-------------- eth0------eth1 eth0------------ |211.241.219.xx | --- | ROUTER | --- |192.168.1.4 | --------------- --------- ------------ when i send traffic from ROUTER to 211.241.219.xx or 192.168.1.4(masquraded), the filter works fine... In ROUTER, tc filter policy is like this: tc filter add dev eth0 parent 1:0 protocol ip u32 match ip dport 80 0xffff flowid 1:12 tc filter add dev eth1 parent 1:0 protocol ip u32 match ip dport 80 0xffff flowid 1:12 but when i send traffic from 211.241.219.xx --> 192.168.1.4 or 192.168.1.4 --> 211.241.219.xx ,\ tc filter didn''t recognize port80. but when i tested another computer it works just fine(masqurade setting are same with above) maybe some setting or modules are needed. but I couldn''t found what i should do to work fine . dose anyone know ? a slice hint can make me very very happy~~ In ROUTER port forwarding,and masqqurading policy are like this: iptables -F iptables -F -t nat iptables -P FORWARD ACCEPT echo 1 > /proc/sys/net/ipv4/ip_forward iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT iptables -t nat -A PREROUTING -i eth0 -p udp --dport 20 -j DNAT --to 192.168.1.4 iptables -t nat -A PREROUTING -i eth0 -p udp --dport 5001 -j DNAT --to 192.168.1.4 iptables -t nat -A PREROUTING -i eth0 -p udp --dport 80 -j DNAT --to 192.168.1.4 iptables -t nat -A PREROUTING -i eth0 -p udp --dport 21 -j DNAT --to 192.168.1.4 iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to 192.168.1.1 iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to 211.241.xx.xx thanks in advance _________________________________________________________________ 상큼한 만남과 따뜻한 공동체 생활... 지금 MSN 커뮤니티에서 시작하세요! http://groups.msn.com/?pgmarket=ko-kr _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/