On 10/03/2011 04:36 PM, ibariouen khalid wrote: > i cant' figure out how to do it > > please give me more detail if yiou can What have you tried? It's pretty simple; something like: set address ZoneB SERVER 10.8.8.8/32 set service MYSERVICE proto tcp dst-port 554 set policy from ZoneA to ZoneB ANY SERVER service MYSERVICE nat dst ip 10.8.8.8 port 5554 permit