# Generated by iptables-save v1.6.0 on Wed Nov 8 21:41:40 2017 *filter :INPUT DROP [98:12536] :FORWARD DROP [0:0] :OUTPUT DROP [0:0] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -i ens33 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -p icmp -j ACCEPT -A FORWARD -i ens33 -o ens38 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i ens38 -o ens33 -j ACCEPT -A FORWARD -d 10.10.10.1/32 -i ens33 -p tcp -m tcp --dport 80 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT -A OUTPUT -m state --state NEW,ESTABLISHED -j ACCEPT COMMIT # Completed on Wed Nov 8 21:41:40 2017 # Generated by iptables-save v1.6.0 on Wed Nov 8 21:41:40 2017 *nat :PREROUTING ACCEPT [869:77939] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [127:15664] :POSTROUTING ACCEPT [9:576] -A PREROUTING -i ens33 -p tcp -m tcp --dport 8080 -j DNAT --to-destination 10.10.10.1:80 -A POSTROUTING -o ens33 -j SNAT --to-source 172.16.128.133 COMMIT # Completed on Wed Nov 8 21:41:40 2017