iptables with two lans

#eth0:      192.168.15.1
#eth0:1:    192.168.16.1
#eth1:      124.158.x.y

*filter
:FORWARD DROP [0:0]
:INPUT DROP [0:0]
:OUTPUT DROP [0:0]
:INBOUND - [0:0]
:OUTBOUND - [0:0]
:LSI - [0:0]
:LSO - [0:0]
:LOG_FILTER - [0:0]

-A INPUT -p icmp -m limit --limit 10/sec -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -j INBOUND
-A INPUT -i eth0 -j INBOUND

-A FORWARD -p icmp -m limit --limit 10/sec -j ACCEPT
-A FORWARD -i eth1 -j OUTBOUND
-A FORWARD -i eth0 -j OUTBOUND

-A FORWARD -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -p udp -m state --state RELATED,ESTABLISHED -j ACCEPT

-A FORWARD -i eth1 -d 192.168.15.2/32 -p tcp -m tcp --dport 80 -j ACCEPT
-A FORWARD -i eth1 -d 192.168.15.2/32 -p udp -m udp --dport 80 -j ACCEPT

-A OUTPUT -p icmp -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o eth1 -j OUTBOUND
-A OUTPUT -o eth0 -j OUTBOUND

-A INBOUND -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INBOUND -p udp -m state --state RELATED,ESTABLISHED -j ACCEPT

-A INBOUND -p tcp -m tcp --dport 53 -j ACCEPT
-A INBOUND -p udp -m udp --dport 53 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 10000 -j ACCEPT
-A INBOUND -p udp -m udp --dport 10000 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 25 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 22 -j ACCEPT
-A INBOUND -p udp -m udp --dport 22 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 80 -j ACCEPT
-A INBOUND -p udp -m udp --dport 80 -j ACCEPT
-A INBOUND -p udp -m udp --dport 3000 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 3000 -j ACCEPT
-A INBOUND -p udp -m udp --dport 67:68 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 67:68 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 8888 -j ACCEPT
-A INBOUND -p udp -m udp --dport 8888 -j ACCEPT
-A INBOUND -j LSI

-A LSI -p icmp -m icmp --icmp-type 8 -j DROP
-A LSI -j DROP

-A OUTBOUND -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTBOUND -p udp -m state --state RELATED,ESTABLISHED -j ACCEPT

-A OUTBOUND -p tcp -m tcp --dport 6881:6899 -j LSO
-A OUTBOUND -p udp -m udp --dport 6881:6899 -j LSO
-A OUTBOUND -p tcp -m tcp --dport 6969 -j LSO
-A OUTBOUND -p udp -m udp --dport 6969 -j LSO
-A OUTBOUND -j ACCEPT

-A LSO -j REJECT --reject-with icmp-port-unreachable
COMMIT

*mangle
:PREROUTING ACCEPT [35:2532]
:INPUT ACCEPT [35:2532]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [21:2668]
:POSTROUTING ACCEPT [21:2668]
COMMIT

*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]

-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.15.1:8888
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8888

-A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -d 124.158.108.254/32 -j DNAT --to-destination 192.168.15.2:80
-A PREROUTING -i eth1 -p udp -m udp --dport 80 -d 124.158.108.154/32 -j DNAT --to-destination 192.168.15.2:80

-A POSTROUTING -o eth1 -j MASQUERADE
COMMIT