Chain PREROUTING (policy ACCEPT 319 packets, 26157 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       6    --  eth2.702 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:127.0.0.1:40443
    0     0 DNAT       6    --  eth3   *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:127.0.0.1:40443
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:80 to:127.0.0.1:80
  181  9412 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:443 to:127.0.0.1:443
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:22 to:127.0.0.1:22
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:8208 to:127.0.0.1:8208
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:2199 to:127.0.0.1:2199
    2   104 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:2198 to:127.0.0.1:2198
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.2.100        udp dpt:623 to:127.0.0.1:623
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.2.100        udp dpt:664 to:127.0.0.1:664
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.2.100        udp dpt:161 to:127.0.0.1:161
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.0.9          tcp dpt:80 to:127.0.0.1:80
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.0.9          tcp dpt:40443 to:127.0.0.1:443
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.0.9          tcp dpt:443 to:127.0.0.1:443
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.0.9          tcp dpt:22 to:127.0.0.1:22
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.0.9          udp dpt:623 to:127.0.0.1:623
    0     0 DNAT       6    --  *      *       0.0.0.0/0            172.31.2.128         tcp dpt:80 to:127.0.0.1:80
    0     0 DNAT       6    --  *      *       0.0.0.0/0            172.31.2.128         tcp dpt:40443 to:127.0.0.1:443
    0     0 DNAT       6    --  *      *       0.0.0.0/0            172.31.2.128         tcp dpt:443 to:127.0.0.1:443
    0     0 DNAT       6    --  *      *       0.0.0.0/0            172.31.2.128         tcp dpt:22 to:127.0.0.1:22
    0     0 DNAT       17   --  *      *       0.0.0.0/0            172.31.2.128         udp dpt:623 to:127.0.0.1:623

Chain INPUT (policy ACCEPT 207 packets, 13836 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 755 packets, 39478 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 755 packets, 39478 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  17   --  *      *       0.0.0.0/0            0.0.0.0/0            udp spt:123 masq ports: 60000-61000
