performance:~# iptables -nvL -t nat Chain PREROUTING (policy ACCEPT 826 packets, 249K bytes) pkts bytes target prot opt in out source destination 1 60 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 to:192.168.0.8 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:35000 to:192.168.0.8 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpts:21000:22000 to:192.168.0.8 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:698 to:192.168.0.11 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8000 to:192.168.0.6 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpts:19000:20000 to:192.168.0.6 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpts:11000:12000 to:192.168.0.7 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:13000 to:192.168.0.7 2 120 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7676 to:192.168.1.4:80 0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:18000 to:192.168.0.20:22 Chain POSTROUTING (policy ACCEPT 116 packets, 10016 bytes) pkts bytes target prot opt in out source destination 77 6142 MASQUERADE all -- * eth0 192.168.0.0/24 0.0.0.0/0 93 6732 MASQUERADE all -- * eth0 192.168.1.0/24 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 206 packets, 16568 bytes) pkts bytes target prot opt in out source destination performance:~# iptables -nvL Chain INPUT (policy DROP 837 packets, 257K bytes) pkts bytes target prot opt in out source destination 0 0 DROP tcp -- lo * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 100 5640 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:69 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:698 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3400 7 420 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7676 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:13000 114 8037 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:14000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:11000:12000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:15000:17000 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:18000 1052 79717 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 97 12804 ACCEPT all -- eth0 * 192.168.1.0/24 0.0.0.0/0 867 74456 ACCEPT all -- eth1 * 192.168.0.0/24 0.0.0.0/0 970 228K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED Chain FORWARD (policy ACCEPT 3362 packets, 672K bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 3434 packets, 306K bytes) pkts bytes target prot opt in out source destination