You should ba able to do this with SNAT and DNAT shouldn't you? Something like iptables -T NAT -A PREROUTING -p tcp --dport 80 -i <input interface> --to-destination <destination ip:destination port> obviously you will need to know the destination ip... I don't think it will work off of an interface :) Jarrad