Sorry the eth0:1 address is 192.168.0.11, not 192.168.0.20. Mike ----- Original Message ----- From: Mike Oroza To: shorewall-users@shorewall.net Sent: Wednesday, October 23, 2002 7:35 PM Subject: DNAT Problem I need a little help. I have a firewall with 2 ip addresses using eth0:1 for the second ip. I also have a Apache web server running a virtual domain on port 8080. It also uses eth0:1 to address 192.168.0.20. In my rules file I have the following entry to point to the virtual server DNAT net loc:192.168.0.11 tcp 8080 80 63.xxx.xxx.215 Unfortuately, when I try to address this server, it loads the main web page at port 80. Any thoughts? Thanks; Mike