iptables -nvL FORWARD Chain FORWARD (policy DROP 1 packets, 66 bytes) pkts bytes target prot opt in out source destination 1087K 474M eth1_fwd all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 eth2_fwd all -- eth2 * 0.0.0.0/0 0.0.0.0/0 1424K 380M eth0_fwd all -- eth0 * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 ======================================================================= iptables -nvL -t nat Chain PREROUTING (policy ACCEPT 148K packets, 21M bytes) pkts bytes target prot opt in out source destination 160K 21M loc_dnat all -- eth0 * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 24567 packets, 1220K bytes) pkts bytes target prot opt in out source destination 0 0 eth2_masq all -- * eth2 0.0.0.0/0 0.0.0.0/0 11364 740K eth0_masq all -- * eth0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 33 packets, 2242 bytes) pkts bytes target prot opt in out source destination Chain eth0_masq (1 references) pkts bytes target prot opt in out source destination 11338 738K MASQUERADE all -- * * 192.168.1.0/24 0.0.0.0/0 Chain eth2_masq (1 references) pkts bytes target prot opt in out source destination 0 0 MASQUERADE all -- * * 192.168.1.0/24 0.0.0.0/0 Chain loc_dnat (1 references) pkts bytes target prot opt in out source destination 0 0 DNAT tcp -- * * 0.0.0.0/0 172.9.23.87 tcp spt:80 dpt:81 to:192.168.1.5 12567 632K DNAT tcp -- * * 0.0.0.0/0 172.9.1.30 multiport dports 80,53,21,3181,389,1352 ,5900,3306 to:192.168.1.2 11958 586K DNAT tcp -- * * 0.0.0.0/0 172.9.23.85 multiport dports 80,53,1433,3181,4899,5 900,389 to:192.168.1.5 0 0 REDIRECT tcp -- * * 0.0.0.0/0 192.168.1.5 tcp dpt:80 redir ports 81 0 0 DNAT tcp -- * * 0.0.0.0/0 172.9.1.85 multiport dports 80,1433,138,139,4899 t o:192.168.1.3 6 288 DNAT tcp -- * * 172.9.23.89 0.0.0.0/0 multiport dports 221,389,1352,3181,80 t o:192.168.1.2 0 0 DNAT tcp -- * * 172.95.23.25 0.0.0.0/0 multiport dports 221,80,3181,389 to:192 .168.1.2 1 52 DNAT tcp -- * * 172.9.23.47 0.0.0.0/0 multiport dports 221,80,3181,389 to:192 .168.1.2 0 0 DNAT tcp -- * * 172.95.23.43 0.0.0.0/0 multiport dports 221,3181,80,389 to:192 .168.1.2 0 0 DNAT tcp -- * * 172.9.12.75 0.0.0.0/0 multiport dports 3181,80,221,389 to:192 .168.1.2 0 0 DNAT tcp -- * * 172.9.23.89 0.0.0.0/0 multiport dports 221,3181 to:192.168.1. 2 2 96 DNAT tcp -- * * 0.0.0.0/0 172.9.44.167 multiport dports 137,138,139,1433,80,53,21,4899,5900,23 to:192.168.1.4