Hi,
I played a bit with the "redirect" rule.
If I configure a redirect rule for DNS and shoot from a Windows-PC a nslookup abc.om 8.8.8.8
I see a correct answer coming from 8.8.8.8 (it comes from the MT, not from Google-DNS). The source IP is 8.8.8.8 but I comes form the MT, so a source-NAT was done.
The way Windows to 8.8.8.8:
The answer:
And the Connection in the MT:
And here, MT say the "Reply SRC Address" is 10.88.20.1 NOT 8.8.8.8.
Somewhere was a SNAT done and replaced the 10.88.20.1 with 8.8.8.8 But I found no documentation regarding this topic.