Chain PREROUTING (policy ACCEPT 1131 packets, 133390 bytes) pkts bytes target prot opt in out source destination 842 45148 NEW tcp -- any any anywhere anywhere state NEW 1144 134170 prerouting_rule all -- any any anywhere anywhere 40 3262 prerouting_wan all -- ppp0 any anywhere anywhere Chain POSTROUTING (policy ACCEPT 9 packets, 813 bytes) pkts bytes target prot opt in out source destination 842 45298 postrouting_rule all -- any any anywhere anywhere 833 44485 MASQUERADE all -- any ppp0 anywhere anywhere Chain OUTPUT (policy ACCEPT 5 packets, 570 bytes) pkts bytes target prot opt in out source destination Chain NEW (1 references) pkts bytes target prot opt in out source destination 842 45148 RETURN all -- any any anywhere anywhere limit: avg 50/sec burst 100 0 0 DROP all -- any any anywhere anywhere Chain postrouting_rule (1 references) pkts bytes target prot opt in out source destination Chain prerouting_rule (1 references) pkts bytes target prot opt in out source destination 0 0 DNAT udp -- ppp0 any anywhere anywhere udp dpt:22 to:10.0.0.51 6 360 DNAT tcp -- ppp0 any anywhere anywhere tcp dpt:22 to:10.0.0.51 Chain prerouting_wan (1 references) pkts bytes target prot opt in out source destination 0 0 DNAT udp -- any any anywhere anywhere udp dpt:2222 to:10.0.0.21:22 7 420 DNAT tcp -- any any anywhere anywhere tcp dpt:2222 to:10.0.0.21:22 root@hydrogen:~#