On 30 August 2011 00:34, Tom Eastep <teastep@shorewall.net> wrote:

Shouldn't that be:

DNAT    cust:+cust_eth2 ...

Bingo. thanks!
champion as always.

Dave