Hi guys, I've managed to disable NAT by deleting the correct rule. This means all my instances are properly routable no, which is exactly what I want. To do this, I'm using iptables -vnL -t nat --line-numbers to get the rule number from the nova-network-snat chain and deleting it using: iptables -t nat -D nova-network-snat <num> My question is when and where are those snat rules created, so that I can prevent them from being setup in the first place. Kind regards -- joe. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130109/9eefacc0/attachment.html>