I have a relatively simple redirect that does not seem to work for the local host. I'm running a DNSBL on a virtual IP address on a host that already has a DNS daemon running. entry is... $IPTABLES -t nat -A PREROUTING -p tcp -d $DNSBL_IP --dport 53 -j REDIRECT --to-port $DNSBL_PORT this works fine from both the network (internet) and from the interfaces on the private side. eth1, eth0 I does not work at all from the local host and no amount of tweaking of the rule set seems to help. I've tried about every DNAT combination I can think of. Any suggestions?? Michael