Hi Tom and all, I'm confronting an issue with Shorewall 4.5.6.2 and DNAT. I've got a server with two ethernet interfaces: eth0 connected to WAN and eth1 to LAN. Although I've got a DNAT rule allowing for requests coming through the WAN interface to be forwarded to their respective port 80, 8080 and 443 of the LAN interface, the log shows that those requests have been dropped. At the same time the user on the client PC, while experiencing a very long delay, sees that his request in the end has been served. I fail to see where my Shorewall configuration could be wrong and I would appreciate your advice to help me diagnose my issue. I'm attaching a zip file with the output of the SHOW command and the log. Thanks for your help. Best Rgds, Costantino ------------------------------------------------------------------------------