My own pondering results in some new, hopefully clearer questions: How does the REDIRECTed packages look like? I mean REDIRECT can't simply change the IP-destination-field into 127.0.0.1, because the proxy wouldn't know where to relay it, would it? Is it true that this REDIRECTed packages, whatever they look like go through the filter-output chain before being delivered locally to the daemon-process? If there exists detailed documentation on this matters please give me a hint. regards Sebastian R. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html