Hi, why do I need "iptables -t tproxy -A PREROUTING -j TPROXY --on-port" to replace "iptables -t nat -A PREROUTING -j DNAT --to-dest <localip> --to-port <proxyport>"? Where is the difference? Does the TPROXY-thing use the nat-helper modules of netfilter too? Thanx, Jan Tegtmeier