[admin@RB3011UiAS] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
 0    ;;; Masquerade rule
      chain=srcnat action=masquerade to-addresses=0.0.0.0 out-interface=ether1 log=no log-prefix=""

 1    ;;; Masquerade rule for VPN
      chain=srcnat action=masquerade to-addresses=0.0.0.0 src-address=172.21.0.0/24 out-interface=ether1 log=no log-prefix=""

 2    ;;; SSH on CRS226-24G-2S+
      chain=dstnat action=dst-nat to-addresses=10.10.0.2 to-ports=52220 protocol=tcp in-interface=ether1 dst-port=52220 log=no log-prefix=""

 3    ;;; SSH on RB2011UiAS-2HnD-IN
      chain=dstnat action=dst-nat to-addresses=10.10.0.3 to-ports=52221 protocol=tcp in-interface=ether1 dst-port=52221 log=no log-prefix=""

 4    ;;; SSH on RB951Ui-2HnD
      chain=dstnat action=dst-nat to-addresses=10.10.0.3 to-ports=52221 protocol=tcp in-interface=ether1 dst-port=52219 log=no log-prefix=""

 5 XI  ;;; SSH on FreeNAS
      chain=dstnat action=dst-nat to-addresses=10.10.0.10 to-ports=22 protocol=tcp in-interface=ether1 dst-port=55900 log=no log-prefix=""

 6    ;;; Plex on FreeNAS
      chain=dstnat action=dst-nat to-addresses=10.10.0.200 to-ports=32400 protocol=tcp in-interface=ether1 dst-port=44400 log=no log-prefix=""

 7    ;;; OpenDNS TCP redirect
      chain=dstnat action=redirect protocol=udp dst-port=53 src-mac-address=!B4:B6:76:EC:6D:DC log=no log-prefix=""

 8    ;;; OpenDNS UDP redirect
      chain=dstnat action=redirect protocol=tcp dst-port=53 src-mac-address=!B4:B6:76:EC:6D:DC log=no log-prefix=""