Balazs Scheidler wrote: > NAT _is_ needed as redirection is implemented using NAT. TCP sessions are > conntracked and this have to be so. Yes, of course. I only worried about the overhead of the double-conntracking and did not think to the end, that it is really needed twice ;-(. Thanks, Jan Tegtmeier