You can only REDIRECT incoming packets AFAIK and not outgoing. And there's better ways of doing this.. *.* /var/log/pipelining Then create a piped file. prw------- 1 root root 0 Oct 7 10:46 pipelining write a script to listen to the pipeline file much like a `tail -f` does and resend all syslogs. Thanks, ____________________________________________ George Vieira Systems Manager georgev@xxxxxxxxxxxxxxxxxxxxxx Citadel Computer Systems Pty Ltd http://www.citadelcomputer.com.au Phone : +61 2 9955 2644 HelpDesk: +61 2 9955 2698 > -----Original Message----- > From: paddy@xxxxxxxxxxxxxxxxxx [mailto:paddy@xxxxxxxxxxxxxxxxxx] > Sent: Tuesday, 7 October 2003 4:38 AM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: '-t nat -A OUTPUT -j REDIRECT' changes source address ? > > > Hi, > > I was trying > > iptables -t nat -A POSTROUTING -p udp --dport 9998 -j SNAT > --to 10.0.0.3 > iptables -t nat -A OUTPUT -p udp --dport 9998 -j REDIRECT > --to-port 514 > > as part of an increasingly hair-brained scheme to tunnel syslogs to a > master server. > > I should mention that the source of this connection is local - the end > of a pipeline of ssh and netcats, I'm trying to restore a usefull > source ip address based on the information in the destination port no. > while redirecting to 514/syslog. > > Is this the expected behaviour ? > > Any suggestions on sensible ways to do this ? > > Many thanks, > > Paddy > >