Chain PREROUTING (policy ACCEPT 2007 packets, 200K bytes) pkts bytes target prot opt in out source destination 0 0 LOG all -- eth2 * 0.0.0.0/0 192.168.0.0/24 LOG flags 0 level 4 prefix `IPT n.PRE 04-21 DMZ2INT ' 0 0 DROP all -- eth2 * 0.0.0.0/0 192.168.0.0/24 0 0 CW_in_mart all -- eth0 * 127.0.0.0/8 0.0.0.0/0 0 0 CW_in_mart all -- eth0 * 10.0.0.0/8 0.0.0.0/0 0 0 CW_in_mart all -- eth0 * 172.16.0.0/12 0.0.0.0/0 0 0 CW_in_mart all -- eth0 * 192.168.0.0/16 0.0.0.0/0 0 0 CW_in_mart all -- eth0 * 224.0.0.0/4 0.0.0.0/0 0 0 CW_in_mart all -- eth0 * 240.0.0.0/5 0.0.0.0/0 0 0 CW_in_mart all -- eth0 * 0.0.0.0/8 0.0.0.0/0 0 0 CW_in_mart all -- eth0 * 169.254.0.0/16 0.0.0.0/0 0 0 CW_in_mart all -- eth0 * 192.0.2.0/24 0.0.0.0/0 0 0 CW_in_mart all -- eth1 * !192.168.0.0/24 0.0.0.0/0 0 0 CW_in_mart all -- eth2 * !192.168.1.0/24 0.0.0.0/0 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 limit: avg 2/sec burst 5 LOG flags 0 level 4 prefix `IPT f.IN 05-81 XMASscan1 ' 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F limit: avg 2/sec burst 5 LOG flags 0 level 4 prefix `IPT f.IN 05-83 XMASscan2 ' 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 limit: avg 2/sec burst 5 LOG flags 0 level 4 prefix `IPT f.IN 05-87 SYNRSTscan ' 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x11/0x01 state NEW limit: avg 2/sec burst 5 LOG flags 0 level 4 prefix `IPT f.IN 05-89 SYNFINscan ' 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x11/0x01 state NEW 196 11748 DNAT tcp -- * * 0.0.0.0/0 66.93.220.206 tcp dpt:22 to:192.168.0.51:22 41 2076 DNAT tcp -- * * 0.0.0.0/0 66.93.220.206 mport dports 49152:49162 to:192.168.0.51:49152-49162 Chain POSTROUTING (policy ACCEPT 447 packets, 29538 bytes) pkts bytes target prot opt in out source destination 260 15871 SNAT all -- * eth0 192.168.1.0/24 0.0.0.0/0 to:66.93.220.99 726 35660 SNAT all -- * eth0 192.168.0.0/24 0.0.0.0/0 to:66.93.220.206 0 0 SNAT tcp -- * * 192.168.0.0/24 192.168.0.51 tcp dpt:22 to:192.168.0.1 0 0 SNAT tcp -- * * 192.168.0.0/24 192.168.0.51 mport dports 49152:49162 to:192.168.0.1 Chain OUTPUT (policy ACCEPT 240 packets, 17514 bytes) pkts bytes target prot opt in out source destination 0 0 DNAT tcp -- * * 0.0.0.0/0 66.93.220.206 tcp dpt:22 to:192.168.0.51:22 0 0 DNAT tcp -- * * 0.0.0.0/0 66.93.220.206 mport dports 49152:49162 to:192.168.0.51:49152-49162 Chain CW_in_mart (11 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 LOG flags 0 level 4 prefix `IPT f.IN 05-12 inMartian ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0