iptables -L -vn -t nat Chain PREROUTING (policy ACCEPT 26486 packets, 2548K bytes) pkts bytes target prot opt in out source destination 449 50030 prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 1257 packets, 146K bytes) pkts bytes target prot opt in out source destination 269 32101 postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 211 27220 MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0 17 816 SNAT all -- * vlan2 0.0.0.0/0 0.0.0.0/0 to:85.64.202.6 Chain OUTPUT (policy ACCEPT 155 packets, 15454 bytes) pkts bytes target prot opt in out source destination Chain postrouting_rule (1 references) pkts bytes target prot opt in out source destination Chain prerouting_rule (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 0 0 ACCEPT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 5 300 DNAT tcp -- vlan2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4243 to:192.168.0.90:4243 65 10366 prerouting_vlan1 all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 Chain prerouting_vlan1 (1 references) pkts bytes target prot opt in out source destination 11 556 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 4242 to:192.168.0.90:4242 27 3365 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 4242 to:192.168.0.90:4242