Hi, I have a firewall set up with these 3 zones: "net" - external adress 212.1.1.1 (fixed IP) network = 212.1.1.0/24 ... all IP''s are useable on the firewall "loc" zone with adress 31.10.5.1 network 31.10.5.0/24 "dsl" zone with adress 10.10.10.10 network 10.10.10.0/24 I don''t use the "dsl" zone anywhere in my config yet, but in the future I will use it (it should do 3 DSL connections in the future on several IP adresses) Now, on the zone "loc" I have a host 31.10.5.126 running a webserver on port 80... I wanted to forward 212.108.16.1 (the FW''s external IP) port 80 to this host... #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # PORT PORT(S) DEST #This did NOT work! DNAT net loc:31.10.5.126 tcp 80 #This did NOT work too! DNAT net loc:31.10.5.126 tcp 80 - 212.1.1.1 #This eventually DID the trick! DNAT net loc:31.10.5.126 tcp 80 - 212.1.1.1:31.10.5.1 Now it''s forwarding port 212.1.1.1:80 to local adress 31.10.5.126:80 Only Now when I start the firewall it''s displaying A warning message Warning: SNAT will occur on all connections to this server and port - rule "DNAT net loc:31.10.5.126 tcp 80 - 212.1.1.1:31.10.5.1" Rule "DNAT net loc:31.10.5.126 tcp 80 - 212.1.1.1:31.10.5.1" added. I don''t get it! (but it works!)