Working with server logs behind firewall

I have several servers set up behind my MT firewall with DST-NAT translating from the public IP to the private ones. However, all my server activity logs say that the visit source address is the private address of the router instead of the true visit source address. I’ve been reading through the manual but can’t understand how to remedy that. I have mail, ftp, dns, and web servers I want to accurately monitor. How can I get the original source address of the visitor through the MT router? Thanks.
Jason

you are apparently using masquerade, and have set out-interface to all. Please change that to the true outgoing interface and your logs should be fine