# iptables -L -t nat -v; iptables -L -vv
Chain PREROUTING (policy ACCEPT 238K packets, 23M bytes)
 pkts bytes target     prot opt in     out     source               destination
    1    47 DNAT       udp  --  eth0   any     anywhere             anywhere            udp dpt:42776 to:192.168.10.76
    3   144 DNAT       tcp  --  eth0   any     anywhere             anywhere            tcp dpt:42776 to:192.168.10.76
  494 23740 DNAT       tcp  --  eth0   any     anywhere             anywhere            tcp dpt:55785 to:192.168.1.42
   11  1027 DNAT       udp  --  eth0   any     anywhere             anywhere            udp dpt:55785 to:192.168.1.42
    0     0 DNAT       tcp  --  eth0   any     anywhere             anywhere            tcp dpt:4242 to:192.168.1.42
    0     0 DNAT       tcp  --  eth0   any     anywhere             anywhere            tcp dpt:http to:192.168.1.42
    0     0 DNAT       udp  --  eth0   any     anywhere             anywhere            udp dpt:http to:192.168.1.42

Chain POSTROUTING (policy ACCEPT 64731 packets, 4985K bytes)
 pkts bytes target     prot opt in     out     source               destination
 110K 8397K MASQUERADE  all  --  any    eth0    anywhere             anywhere

Chain OUTPUT (policy ACCEPT 939 packets, 80005 bytes)
 pkts bytes target     prot opt in     out     source               destination
Chain INPUT (policy DROP 124K packets, 14M bytes)
 pkts bytes target     prot opt in     out     source               destination
2272K 2842M            all  --  any    any     anywhere             anywhere            state ESTABLISHED
1933K 2823M ACCEPT     tcp  --  !eth0  any     anywhere             anywhere            tcp dpt:ssh
   30  2428 ACCEPT     all  --  lo     any     anywhere             anywhere
66250 3445K ACCEPT     tcp  --  any    any     anywhere             anywhere            multiport ports 19150
  116 11754 ACCEPT     udp  --  any    any     anywhere             anywhere            multiport ports domain

Chain FORWARD (policy DROP 57 packets, 4727 bytes)
 pkts bytes target     prot opt in     out     source               destination
  24M   12G ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED
75447 5183K ACCEPT     all  --  eth0   any     anywhere             192.168.0.0/22
 132K   18M ACCEPT     all  --  !eth0  any     anywhere             anywhere

Chain OUTPUT (policy ACCEPT 1690K packets, 370M bytes)
 pkts bytes target     prot opt in     out     source               destination