Question about transparent proxy and iptables (DNAT vs redirect)?

Question

iptables

I'm trying to set up a transparent proxy with squid and iptables. For iptables in two different places, I found 2 different rules that will transparently redirect requests to the 80th port to my squid:

iptables -t nat -A PREROUTING -i eth0.20 -p tcp --dport 80 -j REDIRECT --to-port 3128

or

iptables -t nat -A PREROUTING -i eth0.20 -p tcp --dport 80 -j DNAT --to 192.168.125.1:3128

Both rules work. Actually the question is which method is more ideologically correct, DNAT or REDIRECT? Or is it the same thing?

Answer 1

REDIRECT is only for the local machine (see, there is not even an ip-address in the rule, only a port), DNAT - anywhere.