*filter
:INPUT DROP [86265:7333765]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [23142809:8133264728]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 192.168.10.0/255.255.255.0 -j ACCEPT
-A INPUT -s 127.0.0.1 -j ACCEPT
-A INPUT -s 10.10.0.0/255.255.0.0 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 -j ACCEPT
-A FORWARD -d 10.10.200.2 -p tcp -m tcp --dport 25 -j ACCEPT
-A FORWARD -s 10.10.200.2 -j ACCEPT
COMMIT
*nat
:PREROUTING ACCEPT [785192:83464245]
:POSTROUTING ACCEPT [388826:23626353]
:OUTPUT ACCEPT [392706:23860140]
-A PREROUTING -d 1.2.3.4 -p tcp -m tcp --dport 25 -j DNAT --to-destination 10.10.200.2:25
-A POSTROUTING -s 10.10.0.0/255.255.0.0 -j MASQUERADE
-A OUTPUT -d 1.2.3.4 -p tcp -m tcp --dport 25 -j DNAT --to-destination 10.10.200.2:25
COMMIT