cos takiego mam
iptables -v -L -t nat
Chain PREROUTING (policy ACCEPT 8927 packets, 1488K bytes)
pkts bytes target prot opt in out source destination
9210 1502K prerouting_rule all -- any any anywhere anywhere /* !fw3: Custom prerouting rule chain */
6746 1356K zone_lan_prerouting all -- br-lan any anywhere anywhere /* !fw3 */
2464 146K zone_wan_prerouting all -- eth0.2 any anywhere anywhere /* !fw3 */
Chain INPUT (policy ACCEPT 2657 packets, 191K bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 1990 packets, 140K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 115 packets, 9083 bytes)
pkts bytes target prot opt in out source destination
4664 355K postrouting_rule all -- any any anywhere anywhere /* !fw3: Custom postrouting rule chain */
115 9083 zone_lan_postrouting all -- any br-lan anywhere anywhere /* !fw3 */
4549 345K zone_wan_postrouting all -- any eth0.2 anywhere anywhere /* !fw3 */
Chain postrouting_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain postrouting_rule (1 references)
pkts bytes target prot opt in out source destination
Chain postrouting_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain zone_lan_postrouting (1 references)
pkts bytes target prot opt in out source destination
115 9083 postrouting_lan_rule all -- any any anywhere anywhere /* !fw3: Custom lan postrouting rule chain */
0 0 SNAT tcp -- any any 10.0.1.0/24 10.0.1.20 tcp dpt:www /* !fw3: Most (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 10.0.1.20 udp dpt:80 /* !fw3: Most (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 10.0.1.20 tcp dpt:8080 /* !fw3: Most (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 10.0.1.20 udp dpt:8080 /* !fw3: Most (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 10.0.1.20 tcp dpt:ssh /* !fw3: Most (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 10.0.1.20 udp dpt:ssh /* !fw3: Most (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 10.0.1.20 tcp dpt:https /* !fw3: Most (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 10.0.1.20 udp dpt:https /* !fw3: Most (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 Duszek tcp dpt:www /* !fw3: Router (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 Duszek udp dpt:80 /* !fw3: Router (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 Duszek tcp dpt:8080 /* !fw3: Router (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 Duszek udp dpt:8080 /* !fw3: Router (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 Duszek tcp dpt:ssh /* !fw3: Router (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 Duszek udp dpt:ssh /* !fw3: Router (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 10.0.1.20 tcp dpt:9100 /* !fw3: HP (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 10.0.1.20 udp dpt:9100 /* !fw3: HP (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 10.0.1.2 tcp dpt:discard /* !fw3: WoL (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 10.0.1.2 udp dpt:discard /* !fw3: WoL (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 Maczek.lan tcp dpt:58015 /* !fw3: Torrenty (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 Maczek.lan udp dpt:58015 /* !fw3: Torrenty (reflection) */ to:10.0.1.1
0 0 SNAT tcp -- any any 10.0.1.0/24 10.0.1.20 tcp dpt:ftp /* !fw3: FTP (reflection) */ to:10.0.1.1
0 0 SNAT udp -- any any 10.0.1.0/24 10.0.1.20 udp dpt:21 /* !fw3: FTP (reflection) */ to:10.0.1.1
Chain zone_lan_prerouting (1 references)
pkts bytes target prot opt in out source destination
6746 1356K prerouting_lan_rule all -- any any anywhere anywhere /* !fw3: Custom lan prerouting rule chain */
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxx tcp dpt:81 /* !fw3: Most (reflection) */ to:10.0.1.20:80
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxx udp dpt:81 /* !fw3: Most (reflection) */ to:10.0.1.20:80
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxxx tcp dpt:8081 /* !fw3: Most (reflection) */ to:10.0.1.20:8080
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxx udp dpt:8081 /* !fw3: Most (reflection) */ to:10.0.1.20:8080
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxxx tcp dpt:22221 /* !fw3: Most (reflection) */ to:10.0.1.20:22
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxxx udp dpt:22221 /* !fw3: Most (reflection) */ to:10.0.1.20:22
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxxx tcp dpt:444 /* !fw3: Most (reflection) */ to:10.0.1.20:443
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxxx udp dpt:444 /* !fw3: Most (reflection) */ to:10.0.1.20:443
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxxx tcp dpt:www /* !fw3: Router (reflection) */ to:10.0.1.1:80
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxxx udp dpt:80 /* !fw3: Router (reflection) */ to:10.0.1.1:80
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxxx tcp dpt:8080 /* !fw3: Router (reflection) */ to:10.0.1.1:8080
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxxx udp dpt:8080 /* !fw3: Router (reflection) */ to:10.0.1.1:8080
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxxx tcp dpt:22223 /* !fw3: Router (reflection) */ to:10.0.1.1:22
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxxx udp dpt:22223 /* !fw3: Router (reflection) */ to:10.0.1.1:22
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxxxx tcp dpt:9100 /* !fw3: HP (reflection) */ to:10.0.1.20:9100
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxxx udp dpt:9100 /* !fw3: HP (reflection) */ to:10.0.1.20:9100
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxxx tcp dpt:discard /* !fw3: WoL (reflection) */ to:10.0.1.2:9
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxxx udp dpt:discard /* !fw3: WoL (reflection) */ to:10.0.1.2:9
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxx tcp dpt:58015 /* !fw3: Torrenty (reflection) */ to:10.0.1.3:58015
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxx udp dpt:58015 /* !fw3: Torrenty (reflection) */ to:10.0.1.3:58015
0 0 DNAT tcp -- any any 10.0.1.0/24 94.xxxxxx tcp dpt:22222 /* !fw3: FTP (reflection) */ to:10.0.1.20:21
0 0 DNAT udp -- any any 10.0.1.0/24 94.xxxxxx udp dpt:22222 /* !fw3: FTP (reflection) */ to:10.0.1.20:21
Chain zone_wan_postrouting (1 references)
pkts bytes target prot opt in out source destination
4549 345K postrouting_wan_rule all -- any any anywhere anywhere /* !fw3: Custom wan postrouting rule chain */
4549 345K MASQUERADE all -- any any anywhere anywhere /* !fw3 */
Chain zone_wan_prerouting (1 references)
pkts bytes target prot opt in out source destination
6 320 CONNMARK tcp -- any any anywhere anywhere tcp dpt:22223 CONNMARK or 0x80
6 320 REDIRECT tcp -- any any anywhere anywhere tcp dpt:22223 redir ports 22
31 1552 REDIRECT tcp -- any any anywhere anywhere tcp dpt:https redir ports 443
40 2152 REDIRECT tcp -- any any anywhere anywhere tcp dpt:www redir ports 80
2387 142K prerouting_wan_rule all -- any any anywhere anywhere /* !fw3: Custom wan prerouting rule chain */
92 5280 DNAT tcp -- any any anywhere anywhere tcp dpt:81 /* !fw3: Most */ to:10.0.1.20:80
0 0 DNAT udp -- any any anywhere anywhere udp dpt:81 /* !fw3: Most */ to:10.0.1.20:80
1 44 DNAT tcp -- any any anywhere anywhere tcp dpt:8081 /* !fw3: Most */ to:10.0.1.20:8080
1 98 DNAT udp -- any any anywhere anywhere udp dpt:8081 /* !fw3: Most */ to:10.0.1.20:8080
1 52 DNAT tcp -- any any anywhere anywhere tcp dpt:22221 /* !fw3: Most */ to:10.0.1.20:22
0 0 DNAT udp -- any any anywhere anywhere udp dpt:22221 /* !fw3: Most */ to:10.0.1.20:22
2 96 DNAT tcp -- any any anywhere anywhere tcp dpt:444 /* !fw3: Most */ to:10.0.1.20:443
0 0 DNAT udp -- any any anywhere anywhere udp dpt:444 /* !fw3: Most */ to:10.0.1.20:443
0 0 DNAT tcp -- any any anywhere anywhere tcp dpt:www /* !fw3: Router */ to:10.0.1.1:80
0 0 DNAT udp -- any any anywhere anywhere udp dpt:80 /* !fw3: Router */ to:10.0.1.1:80
101 4140 DNAT tcp -- any any anywhere anywhere tcp dpt:8080 /* !fw3: Router */ to:10.0.1.1:8080
0 0 DNAT udp -- any any anywhere anywhere udp dpt:8080 /* !fw3: Router */ to:10.0.1.1:8080
0 0 DNAT tcp -- any any anywhere anywhere tcp dpt:22223 /* !fw3: Router */ to:10.0.1.1:22
0 0 DNAT udp -- any any anywhere anywhere udp dpt:22223 /* !fw3: Router */ to:10.0.1.1:22
1 40 DNAT tcp -- any any anywhere anywhere tcp dpt:9100 /* !fw3: HP */ to:10.0.1.20:9100
0 0 DNAT udp -- any any anywhere anywhere udp dpt:9100 /* !fw3: HP */ to:10.0.1.20:9100
1 40 DNAT tcp -- any any anywhere anywhere tcp dpt:discard /* !fw3: WoL */ to:10.0.1.2:9
0 0 DNAT udp -- any any anywhere anywhere udp dpt:discard /* !fw3: WoL */ to:10.0.1.2:9
0 0 DNAT tcp -- any any anywhere anywhere tcp dpt:58015 /* !fw3: Torrenty */ to:10.0.1.3:58015
0 0 DNAT udp -- any any anywhere anywhere udp dpt:58015 /* !fw3: Torrenty */ to:10.0.1.3:58015
6 352 DNAT tcp -- any any anywhere anywhere tcp dpt:22222 /* !fw3: FTP */ to:10.0.1.20:21
0 0 DNAT udp -- any any anywhere anywhere udp dpt:22222 /* !fw3: FTP */ to:10.0.1.20:21