But when I try to put the redirection it gives the following error [root@cache netfilter]# iptables -t tproxy -A PREROUTING -i eth0 -p tcpI am not sure this will work when eth0 has no IP address. In fact, you probably want -i br0 -m physdev --physdev-in eth0.8 or --physdev-in eth0.-m tcpYou do not need -m tcp.--dport 80 -j TPROXY --on-port 80 iptables v1.3.5: Unknown arg `--on-port'Works for me. You probably do not have TPROXY support in iptables. Jan Engelhardt