SVEASOFT:~#iptables -t nat -vL Chain PREROUTING (policy ACCEPT 4228 packets, 395K bytes) pkts bytes target prot opt in out source destination 3 156 DNAT all -- any any anywhere 81.187.32.154 to:192.168.100.200 0 0 DNAT all -- any any anywhere 81.187.32.156 to:192.168.100.201 Chain POSTROUTING (policy ACCEPT 200 packets, 26559 bytes) pkts bytes target prot opt in out source destination 1 72 SNAT all -- any vlan1 192.168.100.200 anywhere to:81.187.32.154 0 0 SNAT all -- any vlan1 192.168.100.201 anywhere to:81.187.32.156 5 233 SNAT all -- any vlan1 192.168.100.0/24 anywhere to:81.187.67.134 Chain OUTPUT (policy ACCEPT 4 packets, 528 bytes) pkts bytes target prot opt in out source destination SVEASOFT:~#iptables -vL Chain Cid4287587B.0 (1 references) pkts bytes target prot opt in out source destination 0 0 RULE_0 udp -- any any anywhere anywhere udp multiport dports bootpc,bootps Chain Cid4287587B.1 (1 references) pkts bytes target prot opt in out source destination 0 0 RULE_0 udp -- any any anywhere anywhere udp multiport dports bootpc,bootps Chain Cid42875885.0 (1 references) pkts bytes target prot opt in out source destination 0 0 Cid42875885.1 all -- any any anywhere 81.187.67.134 0 0 Cid42875885.1 all -- any any anywhere 81.187.32.154 0 0 Cid42875885.1 all -- any any anywhere 81.187.32.156 18 1674 Cid42875885.1 all -- any any anywhere 192.168.100.230 Chain Cid42875885.1 (4 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT icmp -- any any anywhere anywhere icmp type 8 code 0 0 0 ACCEPT tcp -- any any anywhere anywhere tcp multiport dports ssh,www,5000,5431,2869 0 0 ACCEPT udp -- any any anywhere anywhere udp multiport dports upnp,bootpc,bootps Chain Cid42875893.0 (1 references) pkts bytes target prot opt in out source destination 0 0 Cid42875893.1 icmp -- any any anywhere anywhere icmp type 0 code 0 0 0 Cid42875893.1 icmp -- any any anywhere anywhere icmp ttl-zero-during-transit Chain Cid42875893.1 (2 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any 81.187.67.134 anywhere 0 0 ACCEPT all -- any any 81.187.32.154 anywhere 0 0 ACCEPT all -- any any 81.187.32.156 anywhere 0 0 ACCEPT all -- any any 192.168.100.230 anywhere Chain Cid42878DA7.0 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT icmp -- any any anywhere anywhere icmp type 8 code 0 0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ssh 0 0 ACCEPT udp -- any any anywhere anywhere udp dpt:4569 Chain Cid42878DA7.1 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT icmp -- any any anywhere anywhere icmp type 8 code 0 0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ssh 0 0 ACCEPT udp -- any any anywhere anywhere udp dpt:4569 Chain INPUT (policy DROP 13 packets, 1084 bytes) pkts bytes target prot opt in out source destination 229 20964 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- any any 192.168.100.20 anywhere tcp dpt:ssh state NEW,ESTABLISHED 0 0 ACCEPT all -- lo any anywhere anywhere state NEW 0 0 Cid4287587B.1 all -- any any anywhere 255.255.255.255 state NEW 33 4464 Cid42875885.0 all -- any any 192.168.100.0/24 anywhere state NEW 0 0 ACCEPT all -- any any 81.187.67.134 anywhere state NEW 0 0 ACCEPT all -- any any 81.187.32.154 anywhere state NEW 0 0 ACCEPT all -- any any 81.187.32.156 anywhere state NEW 0 0 ACCEPT all -- any any 192.168.100.230 anywhere state NEW 5 240 RULE_6 all -- any any anywhere 81.187.67.134 0 0 RULE_6 all -- any any anywhere 81.187.32.154 94 4048 RULE_6 all -- any any anywhere 81.187.32.156 18 1674 RULE_6 all -- any any anywhere 192.168.100.230 0 0 ACCEPT icmp -- any any anywhere 192.168.100.0/24 icmp destination-unreachable state NEW 15 2790 ACCEPT all -- any any 192.168.100.0/24 anywhere state NEW 17 828 RULE_9 all -- any any anywhere anywhere Chain FORWARD (policy DROP 12 packets, 680 bytes) pkts bytes target prot opt in out source destination 466 120K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 Cid42878DA7.1 all -- any any anywhere 192.168.100.201 state NEW 2 120 ACCEPT tcp -- any any anywhere 192.168.100.200 tcp dpt:smtp state NEW 0 0 ACCEPT icmp -- any any anywhere 192.168.100.0/24 icmp destination-unreachable state NEW 281 14444 ACCEPT all -- any any 192.168.100.0/24 anywhere state NEW 23 1112 RULE_9 all -- any any anywhere anywhere Chain OUTPUT (policy DROP 2 packets, 864 bytes) pkts bytes target prot opt in out source destination 318 50980 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- any any anywhere 192.168.100.20 tcp spt:ssh state RELATED,ESTABLISHED 0 0 ACCEPT all -- any lo anywhere anywhere state NEW 0 0 Cid4287587B.0 all -- any any anywhere 255.255.255.255 state NEW 0 0 Cid42878DA7.0 all -- any any anywhere 192.168.100.201 state NEW 0 0 ACCEPT tcp -- any any anywhere 192.168.100.200 tcp dpt:smtp state NEW 158 37899 Cid42875893.0 all -- any any anywhere 192.168.100.0/24 0 0 ACCEPT all -- any any 81.187.67.134 anywhere state NEW 0 0 ACCEPT all -- any any 81.187.32.154 anywhere state NEW 0 0 ACCEPT all -- any any 81.187.32.156 anywhere state NEW 158 37899 ACCEPT all -- any any 192.168.100.230 anywhere state NEW 0 0 RULE_6 all -- any any anywhere 81.187.67.134 0 0 RULE_6 all -- any any anywhere 81.187.32.154 0 0 RULE_6 all -- any any anywhere 81.187.32.156 0 0 RULE_6 all -- any any anywhere 192.168.100.230 0 0 ACCEPT icmp -- any any anywhere 192.168.100.0/24 icmp destination-unreachable state NEW 0 0 ACCEPT all -- any any 192.168.100.0/24 anywhere state NEW 0 0 RULE_9 all -- any any anywhere anywhere Chain RULE_0 (2 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- any any anywhere anywhere LOG level warning prefix `RULE 0 -- ACCEPT ' 0 0 ACCEPT all -- any any anywhere anywhere Chain RULE_6 (8 references) pkts bytes target prot opt in out source destination 117 5962 LOG all -- any any anywhere anywhere LOG level warning prefix `RULE 6 -- DENY ' 117 5962 DROP all -- any any anywhere anywhere Chain RULE_9 (3 references) pkts bytes target prot opt in out source destination 40 1940 LOG all -- any any anywhere anywhere LOG level warning prefix `RULE 9 -- DENY ' 40 1940 DROP all -- any any anywhere anywhere