Chain PREROUTING (policy ACCEPT 45128 packets, 12M bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:80 to:127.0.0.1:80
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:443 to:127.0.0.1:443
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:22 to:127.0.0.1:22
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:2198 to:127.0.0.1:2198
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.2.100        udp dpt:161 to:127.0.0.1:161
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:2199 to:127.0.0.1:2199
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:6100 to:127.0.0.1:6100
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.2.100        udp dpt:623 to:127.0.0.1:623
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.2.100        udp dpt:664 to:127.0.0.1:664
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.2.100        udp dpt:1900 to:127.0.0.1:1900
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.2.100        tcp dpt:8208 to:127.0.0.1:8208
    4   208 DNAT       6    --  *      *       0.0.0.0/0            192.168.60.20        tcp dpt:80 to:127.0.0.1:80
 2673  139K DNAT       6    --  *      *       0.0.0.0/0            192.168.60.20        tcp dpt:443 to:127.0.0.1:443
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.60.20        tcp dpt:22 to:127.0.0.1:22
    8   416 DNAT       6    --  *      *       0.0.0.0/0            192.168.60.20        tcp dpt:2198 to:127.0.0.1:2198
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.60.20        udp dpt:161 to:127.0.0.1:161
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.60.20        tcp dpt:2199 to:127.0.0.1:2199
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.60.20        tcp dpt:6100 to:127.0.0.1:6100
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.60.20        udp dpt:623 to:127.0.0.1:623
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.60.20        udp dpt:664 to:127.0.0.1:664
    0     0 DNAT       17   --  *      *       0.0.0.0/0            192.168.60.20        udp dpt:1900 to:127.0.0.1:1900
    0     0 DNAT       6    --  *      *       0.0.0.0/0            192.168.60.20        tcp dpt:8208 to:127.0.0.1:8208

Chain INPUT (policy ACCEPT 19706 packets, 8058K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 23877 packets, 1253K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 23877 packets, 1253K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  17   --  *      *       0.0.0.0/0            0.0.0.0/0            udp spt:123 masq ports: 60000-61000
    0     0 MASQUERADE  17   --  *      *       0.0.0.0/0            0.0.0.0/0            udp spt:123 masq ports: 60000-61000
