1. swinchen@cloudy:~$ sudo iptables -vn -L -t nat
  2. Chain PREROUTING (policy ACCEPT 383 packets, 34741 bytes)
  3. pkts bytes target prot opt in out source destination
  4. 418 36793 nova-network-PREROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  5. 383 34741 nova-compute-PREROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  6. 383 34741 nova-api-PREROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  8. Chain INPUT (policy ACCEPT 191 packets, 22953 bytes)
  9. pkts bytes target prot opt in out source destination
  11. Chain OUTPUT (policy ACCEPT 216 packets, 13971 bytes)
  12. pkts bytes target prot opt in out source destination
  13. 219 14151 nova-network-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0
  14. 216 13971 nova-compute-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0
  15. 216 13971 nova-api-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0
  17. Chain POSTROUTING (policy ACCEPT 226 packets, 14799 bytes)
  18. pkts bytes target prot opt in out source destination
  19. 441 27699 nova-network-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  20. 441 27699 nova-compute-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  21. 441 27699 nova-api-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  22. 441 27699 nova-postrouting-bottom all -- * * 0.0.0.0/0 0.0.0.0/0
  23. 0 0 MASQUERADE tcp -- * * 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
  24. 0 0 MASQUERADE udp -- * * 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
  25. 0 0 MASQUERADE all -- * * 192.168.122.0/24 !192.168.122.0/24
  27. Chain nova-api-OUTPUT (1 references)
  28. pkts bytes target prot opt in out source destination
  30. Chain nova-api-POSTROUTING (1 references)
  31. pkts bytes target prot opt in out source destination
  33. Chain nova-api-PREROUTING (1 references)
  34. pkts bytes target prot opt in out source destination
  36. Chain nova-api-float-snat (1 references)
  37. pkts bytes target prot opt in out source destination
  39. Chain nova-api-snat (1 references)
  40. pkts bytes target prot opt in out source destination
  41. 226 14799 nova-api-float-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  43. Chain nova-compute-OUTPUT (1 references)
  44. pkts bytes target prot opt in out source destination
  46. Chain nova-compute-POSTROUTING (1 references)
  47. pkts bytes target prot opt in out source destination
  49. Chain nova-compute-PREROUTING (1 references)
  50. pkts bytes target prot opt in out source destination
  52. Chain nova-compute-float-snat (1 references)
  53. pkts bytes target prot opt in out source destination
  55. Chain nova-compute-snat (1 references)
  56. pkts bytes target prot opt in out source destination
  57. 226 14799 nova-compute-float-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  59. Chain nova-network-OUTPUT (1 references)
  60. pkts bytes target prot opt in out source destination
  61. 0 0 DNAT udp -- * * 0.0.0.0/0 10.20.0.1 udp dpt:1000 to:192.168.1.2:1194
  62. 3 180 DNAT all -- * * 0.0.0.0/0 x.x.x.230 to:192.168.1.3
  64. Chain nova-network-POSTROUTING (1 references)
  65. pkts bytes target prot opt in out source destination
  66. 0 0 ACCEPT all -- * * 192.168.0.0/24 10.20.0.1
  67. 0 0 ACCEPT all -- * * 192.168.0.0/24 10.128.0.0/24
  68. 0 0 ACCEPT all -- * * 192.168.0.0/24 192.168.0.0/24 ! ctstate DNAT
  70. Chain nova-network-PREROUTING (1 references)
  71. pkts bytes target prot opt in out source destination
  72. 24 1440 DNAT tcp -- * * 0.0.0.0/0 169.254.169.254 tcp dpt:80 to:10.20.0.1:8775
  73. 0 0 DNAT udp -- * * 0.0.0.0/0 10.20.0.1 udp dpt:1000 to:192.168.1.2:1194
  74. 11 612 DNAT all -- * * 0.0.0.0/0 x.x.x..230 to:192.168.1.3
  76. Chain nova-network-float-snat (1 references)
  77. pkts bytes target prot opt in out source destination
  78. 215 12900 SNAT all -- * * 192.168.1.3 0.0.0.0/0 to:x.x.x.230
  80. Chain nova-network-snat (1 references)
  81. pkts bytes target prot opt in out source destination
  82. 441 27699 nova-network-float-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  83. 0 0 SNAT all -- * * 192.168.0.0/24 0.0.0.0/0 to:x.x.x.226
  85. Chain nova-postrouting-bottom (1 references)
  86. pkts bytes target prot opt in out source destination
  87. 441 27699 nova-network-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  88. 226 14799 nova-compute-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  89. 226 14799 nova-api-snat all -- * * 0.0.0.0/0 0.0.0.0/0