Hi, I was trying iptables -t nat -A POSTROUTING -p udp --dport 9998 -j SNAT --to 10.0.0.3 iptables -t nat -A OUTPUT -p udp --dport 9998 -j REDIRECT --to-port 514 as part of an increasingly hair-brained scheme to tunnel syslogs to a master server. I should mention that the source of this connection is local - the end of a pipeline of ssh and netcats, I'm trying to restore a usefull source ip address based on the information in the destination port no. while redirecting to 514/syslog. Is this the expected behaviour ? Any suggestions on sensible ways to do this ? Many thanks, Paddy