root@ostrich ~ # iptables -nvL --line-numbers
Chain INPUT (policy ACCEPT 1721M packets, 103G bytes)
num   pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination
1     102M  523G ACCEPT     all  --  vmbr0  vmbr0   0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED
2      10M  361M ACCEPT     all  --  vmbr0  vmbr0   0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 1769M packets, 5357G bytes)
num   pkts bytes target     prot opt in     out     source               destination


root@ostrich ~ # iptables -nvL --line-numbers -t nat
Chain PREROUTING (policy ACCEPT 23M packets, 914M bytes)
num   pkts bytes target     prot opt in     out     source               destination
1     4494  212K DNAT       tcp  --  vmbr0  *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:192.168.42.113:443
2     105K 6242K DNAT       tcp  --  vmbr0  *       0.0.0.0/0            0.0.0.0/0            tcp dpt:2222 to:192.168.42.116:22

Chain POSTROUTING (policy ACCEPT 671K packets, 49M bytes)
num   pkts bytes target     prot opt in     out     source               destination
1      13M 1537M MASQUERADE  all  --  *      vmbr0   0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 2937K packets, 1007M bytes)
num   pkts bytes target     prot opt in     out     source               destination