I botched the iptables command in my last answer, the correct one is: iptables -t nat -A PREROUTING -p tcp --destination-port 8080 \ -j DNAT --to-destination 192.168.1.2:80 Cheers, Simon