root@ostrich ~ # iptables -nvL --line-numbers Chain INPUT (policy ACCEPT 1721M packets, 103G bytes) num pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 102M 523G ACCEPT all -- vmbr0 vmbr0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 2 10M 361M ACCEPT all -- vmbr0 vmbr0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 1769M packets, 5357G bytes) num pkts bytes target prot opt in out source destination root@ostrich ~ # iptables -nvL --line-numbers -t nat Chain PREROUTING (policy ACCEPT 23M packets, 914M bytes) num pkts bytes target prot opt in out source destination 1 4494 212K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 to:192.168.42.113:443 2 105K 6242K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2222 to:192.168.42.116:22 Chain POSTROUTING (policy ACCEPT 671K packets, 49M bytes) num pkts bytes target prot opt in out source destination 1 13M 1537M MASQUERADE all -- * vmbr0 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 2937K packets, 1007M bytes) num pkts bytes target prot opt in out source destination