keepalived 1.1.20 nat not working

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

dear all,

i have the problem thaqt the nat not working. I use centos 5.5.
ipvsadm say all ok.

IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  XX.XX.XX.XX:http wlc persistent 20
  -> 192.168.0.17:http            Masq    1      0          0

But on the webserver (192.168.0.17) i see the original client address.

Kind Regards
Thomas


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJMqM/BAAoJEG7j5hDWI8HyhfcH/A5wpq5lawoIEmBpHPufVSN7
fASCVQp72OvnWeSsZtHwWDZ05ccjakyDnelsFSwmDx0fQWOkc6mcWOvX+R6zUePo
pcLRMPP1j6fQrmpR4F/cFdvuGgUqluwlq3V+/hq7Aay2AGFIxtmUqVGtF+3eUWnP
cWU7FNak4ekl9SmAq6DpLD1OV4DU42EidKpYxUt48P+Aw3B9O+sIDc+/iCl8M/vs
ex2Xti/RDcbDv8wJMpA28cnkcHBNOuvPQt/HCcMcKDXiMrWAdu6cwxgnSdMm6Faa
UJNThRdL1OV1Oyj0OxC0xnCjjCRVrvcnGSMhFX/7k0jP1WunQCw9oBier2xEZWY=
=2uK/
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Virtualization is moving to the mainstream and overtaking non-virtualized
environment for deploying applications. Does it make network security 
easier or more difficult to achieve? Read this whitepaper to separate the 
two and get a better understanding.
http://p.sf.net/sfu/hp-phase2-d2d