TEE and port forwarding in same host

[Alan Lee <dbpalan@xxxxxxxxx>]

Server #1 192.168.1.1 UDP port 516 receiving traffic from multiple
hosts.  I want to make another application also receive the "raw"
incoming traffic to UDP port 2000 without any configuration change to
the syslog application with following attempt:

1. In server #1, setup TEE to replicate the traffic to server #2 port 516

        iptables -A PREROUTING -t mangle -i eth0 -p udp --dport 516 -j
TEE --gateway 192.168.1.2

2. In server #2, setup port forwarding from port 516 --> server #1 port 2000

        iptables -A PREROUTING -t nat -i eth0 -p udp -d 192.168.1.1
--dport 516 -j DNAT --to-destination 192.168.1.1:2000

The configuration works perfectly.  But it does not work without the
help of server #2.

Can anyone advice how to make both rules works only with server #1 ?
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html