Hello All,

Im trying (unsuccessfully thus far) to do the following.

Redirect all port 80 http traffic coming from subnet 172.16.100.0/24 to 172.16.200.5:80

The idea being that all people on the 172.16.100.0 subnet are suspended from surfing the net and that any http request they make will bring them to a default webpage on the server saying something to the effect of pls call our office to activate your account blah blah blah

here is what I have tried and failed with so far;

iptables -t nat -A PREROUTING -p tcp -s 172.16.100.0/24 -d 0/0 -dport 80 -j DNAT --to 172.16.200.5:80

i know im overlooking something but what i dont know, any idea on this one??