Hi there I''ve built a configuration based on following document: http://en.opensuse.org/Xen3_and_a_Virtual_Network I have one physical interface on dom0 - eth0 with public IP, xenbr0 with local IP(10.100.0.1/24) and 8 domU with local IP from the same network as xenbr0. IP address on xenbr0 is gw for all domU. ip forwarding is enabled. My dom0 iptables rules: -A PREROUTING -d XX.XX.XX.XX -p tcp -m tcp --dport 5080 -j DNAT --to-destination 10.100.0.7:80 -A POSTROUTING -o eth0 -j SNAT --to-source XX.XX.X.XX The SNAT rule works correctly, I can reach internet hosts from domU. At the same time I have problem with the DNAT rule. I''m able to connect to domU from the Internet and when I try to download file through http protocol I can reach only 40kb/sec while I have 100Mb Internet link. I tried other protocols: scp, ftp but problem still exists. I''ve tested connection between domU --> domU, domU ---> dom0, dom0 ---> dom, Internet ---> dom0 and dom0 ---> Internet - speed is acceptable. Also I tried to play with "iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080" on dom0. Speed is good too. Please help me to solve the problem Regards -- Dmytro _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users