1. [email protected]:~# iptables -t nat -nvL
  2. Chain PREROUTING (policy ACCEPT 29 packets, 6703 bytes)
  3. pkts bytes target prot opt in out source destination
  4. 29 6703 nova-network-PREROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  5. 29 6703 nova-compute-PREROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  6. 29 6703 nova-api-PREROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  7. Chain INPUT (policy ACCEPT 29 packets, 6703 bytes)
  8. pkts bytes target prot opt in out source destination
  9. Chain OUTPUT (policy ACCEPT 107 packets, 6941 bytes)
  10. pkts bytes target prot opt in out source destination
  11. 109 7085 nova-network-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0
  12. 107 6941 nova-compute-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0
  13. 107 6941 nova-api-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0
  14. Chain POSTROUTING (policy ACCEPT 109 packets, 7085 bytes)
  15. pkts bytes target prot opt in out source destination
  16. 109 7085 nova-network-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  17. 109 7085 nova-compute-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  18. 109 7085 nova-api-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0
  19. 109 7085 nova-postrouting-bottom all -- * * 0.0.0.0/0 0.0.0.0/0
  20. 0 0 MASQUERADE tcp -- * * 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
  21. 0 0 MASQUERADE udp -- * * 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
  22. 0 0 MASQUERADE all -- * * 192.168.122.0/24 !192.168.122.0/24
  23. Chain nova-api-OUTPUT (1 references)
  24. pkts bytes target prot opt in out source destination
  25. Chain nova-api-POSTROUTING (1 references)
  26. pkts bytes target prot opt in out source destination
  27. Chain nova-api-PREROUTING (1 references)
  28. pkts bytes target prot opt in out source destination
  29. Chain nova-api-float-snat (1 references)
  30. pkts bytes target prot opt in out source destination
  31. Chain nova-api-snat (1 references)
  32. pkts bytes target prot opt in out source destination
  33. 109 7085 nova-api-float-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  34. Chain nova-compute-OUTPUT (1 references)
  35. pkts bytes target prot opt in out source destination
  36. Chain nova-compute-POSTROUTING (1 references)
  37. pkts bytes target prot opt in out source destination
  38. Chain nova-compute-PREROUTING (1 references)
  39. pkts bytes target prot opt in out source destination
  40. Chain nova-compute-float-snat (1 references)
  41. pkts bytes target prot opt in out source destination
  42. Chain nova-compute-snat (1 references)
  43. pkts bytes target prot opt in out source destination
  44. 109 7085 nova-compute-float-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  45. Chain nova-network-OUTPUT (1 references)
  46. pkts bytes target prot opt in out source destination
  47. 0 0 DNAT udp -- * * 0.0.0.0/0 10.20.0.1 udp dpt:1000 to:192.168.1.2:1194
  48. 2 144 DNAT all -- * * 0.0.0.0/0 XXX.YYY.ZZZ.230 to:192.168.1.3
  49. Chain nova-network-POSTROUTING (1 references)
  50. pkts bytes target prot opt in out source destination
  51. 0 0 ACCEPT all -- * * 192.168.0.0/24 10.20.0.1
  52. 0 0 ACCEPT all -- * * 192.168.0.0/24 10.128.0.0/24
  53. 0 0 ACCEPT all -- * * 192.168.0.0/24 192.168.0.0/24 ! ctstate DNAT
  54. Chain nova-network-PREROUTING (1 references)
  55. pkts bytes target prot opt in out source destination
  56. 0 0 DNAT tcp -- * * 0.0.0.0/0 169.254.169.254 tcp dpt:80 to:10.20.0.1:8775
  57. 0 0 DNAT udp -- * * 0.0.0.0/0 10.20.0.1 udp dpt:1000 to:192.168.1.2:1194
  58. 0 0 DNAT all -- * * 0.0.0.0/0 XXX.YYY.ZZZ.230 to:192.168.1.3
  59. Chain nova-network-float-snat (1 references)
  60. pkts bytes target prot opt in out source destination
  61. 0 0 SNAT all -- * * 192.168.1.3 0.0.0.0/0 to:XXX.YYY.ZZZ.230
  62. Chain nova-network-snat (1 references)
  63. pkts bytes target prot opt in out source destination
  64. 109 7085 nova-network-float-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  65. 0 0 SNAT all -- * * 192.168.0.0/24 0.0.0.0/0 to:XXX.YYY.ZZZ.226
  66. Chain nova-postrouting-bottom (1 references)
  67. pkts bytes target prot opt in out source destination
  68. 109 7085 nova-network-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  69. 109 7085 nova-compute-snat all -- * * 0.0.0.0/0 0.0.0.0/0
  70. 109 7085 nova-api-snat all -- * * 0.0.0.0/0 0.0.0.0/0