1This target is only valid in the 2.B nat 3table, in the 4.B PREROUTING 5and 6.B OUTPUT 7chains, and user-defined chains which are only called from those 8chains. It redirects the packet to the machine itself by changing the 9destination IP to the primary address of the incoming interface 10(locally-generated packets are mapped to the 127.0.0.1 address). It 11takes one option: 12.TP 13.BR "--to-ports " "\fIport\fP[-\fIport\fP]" 14This specifies a destination port or range of ports to use: without 15this, the destination port is never altered. This is only valid 16if the rule also specifies 17.B "-p tcp" 18or 19.BR "-p udp" . 20.TP 21.BR "--random" 22If option 23.B "--random" 24is used then port mapping will be randomized (kernel >= 2.6.22). 25.RS 26.PP 27