diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index 18969d97c..9a63faabe 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -493,6 +493,33 @@ eth1:192.168.1.4 0.0.0.0/0 192.168.1.1 tcp 21
to reply back through the Shorewall system who can then rewrite the
SOURCE IP address in the responses properly.
+
+
+ (FAQ 1g) I would like to redirect port 80 on my public IP
+ address (206.124.146.176) to port 993 on internet host 66.249.93.111
+
+
+ Answer: This requires a vile
+ hack similar to the one in FAQ 2. Assuming
+ that your Internet zone is named net and connects
+ on interface eth0:
+
+ In /etc/shorewall/rules:#ACTION SOURCE DEST PROTO DEST PORT SOURCE ORIGINAL
+# PORT DEST.
+DNAT net net:66.249.93.111:993 tcp 80 - 206.124.146.176
+
+ In /etc/shorewall/interfaces, specify the
+ routeback option on
+ eth0:#ZONE INTERFACE BROADCAST OPTIONS
+net eth0 detect routeback
+
+ And in /etc/shorewall/masq;#INTERFACE SOURCE ADDRESS PROTO PORT
+eth0:66.249.93.111 0.0.0.0/0 206.124.146.176 tcp 993
+
+ Like the hack in FAQ 2, this one results in all forwarded
+ connections looking to the server (66.249.93.11) as if they originated
+ on your firewall (206.124.146.176).
+