mike@mlab:~$ sudo iptables -t nat -L -n -v Chain PREROUTING (policy ACCEPT 26 packets, 1827 bytes) pkts bytes target prot opt in out source destination 26 1827 gforward all -- * * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 MASQUERADE all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x1 36 2243 fromprivate all -- * * 192.168.0.0/16 0.0.0.0/0 0 0 fromprivate all -- * * 172.16.0.0/12 0.0.0.0/0 0 0 fromprivate all -- * * 10.0.0.0/8 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 19 packets, 1146 bytes) pkts bytes target prot opt in out source destination 19 1146 gforward all -- * * 0.0.0.0/0 0.0.0.0/0 Chain fromprivate (3 references) pkts bytes target prot opt in out source destination 24 1523 ACCEPT all -- * * 0.0.0.0/0 192.168.0.0/16 0 0 ACCEPT all -- * * 0.0.0.0/0 172.16.0.0/12 0 0 ACCEPT all -- * * 0.0.0.0/0 10.0.0.0/8 12 720 MASQUERADE all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ftolocal (3 references) pkts bytes target prot opt in out source destination Chain gforward (2 references) pkts bytes target prot opt in out source destination 0 0 ftolocal all -- * * 0.0.0.0/0 192.168.1.12 0 0 ftolocal all -- * * 0.0.0.0/0 127.0.0.1 7 588 ftolocal all -- * * 0.0.0.0/0 192.168.1.99