When using the REDIRECT target (e.g., doing transparent web proxying) the packet's destination IP address is mangled to 127.0.0.0. When using proxy web servers like Apache or Squid do they automatically retrieve the original destination IP address? For HTTP v1.1 the host is included in the request header so the proxy does not strictly need it. But HTTP v1.0 does not contain the host name/IP address. I've read there is a netfilter version of the getsockopt function. Do they use this or some other mechanism? Thx, Ken