If I REDIRECT instead of DNAT then I'd be taken to the primary address
rather than the virtual IP I have bound, so that unfortunately isn't
an option.
Thanks,
Jason