iptables SO_ORIGINAL_DST

this option in socket call can let you retrieve the original IP and port number of a redirected TCP session. Brilliant.