Now over to NAT! NAT = Network Address Translation there was a very limited implementation in kernel 2.2 called ip_masquerade NAT in iptables is a lot more powerful. There's two main NAT usages SNAT Source NAT, changes the sourceaddress of a connection DNAT Destination NAT, the same but changes the destinationaddress (also called RNAT (Reverse NAT) in some implementations)