> iptables -t nat -L Chain PREROUTING (policy ACCEPT) target prot opt source destination DNAT udp -- anywhere 10.1.1.1 udp dpt:domain to:200.204.0.10 DNAT tcp -- anywhere anywhere tcp dpt:www to:10.1.1.2 REDIRECT tcp -- anywhere anywhere tcp dpt:webcache redir ports 80 Chain POSTROUTING (policy ACCEPT) target prot opt source destination MASQUERADE all -- 10.0.0.0/8 anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination