Hi I want to log some packets in the INPUT and FORWARD chains, but with the original address of the packets. (ie) with the destination address before any DNAT rule has been applied on the packet in the PREROUTING chain. When the packet comes to the INPUT / FORWARD chains, it will be after any DNAT has been applied. I do not want the NATted address to be present in the logs, but the original address as the received interface saw it. Is this possible? Regards Prabha