Server #1 192.168.1.1 UDP port 516 receiving traffic from multiple hosts. I want to make another application also receive the "raw" incoming traffic to UDP port 2000 without any configuration change to the syslog application with following attempt: 1. In server #1, setup TEE to replicate the traffic to server #2 port 516 iptables -A PREROUTING -t mangle -i eth0 -p udp --dport 516 -j TEE --gateway 192.168.1.2 2. In server #2, setup port forwarding from port 516 --> server #1 port 2000 iptables -A PREROUTING -t nat -i eth0 -p udp -d 192.168.1.1 --dport 516 -j DNAT --to-destination 192.168.1.1:2000 The configuration works perfectly. But it does not work without the help of server #2. Can anyone advice how to make both rules works only with server #1 ? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html