-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-A PREROUTING -d **/32 -j DNAT --to-destination 10.0.3.86
-A PREROUTING -d **/32 -j DNAT --to-destination 10.0.3.199
-A PREROUTING -d **/32 -j DNAT --to-destination 10.0.3.45
-A PREROUTING -d **/32 -p tcp -m tcp --dport 2220 -j DNAT --to-destination 10.0.3.129:22
-A PREROUTING -d **/32 -j DNAT --to-destination **
-A POSTROUTING -s 10.0.3.86/32 -j SNAT --to-source **
-A POSTROUTING -s 10.0.3.199/32 -j SNAT --to-source **
-A POSTROUTING -s 10.0.3.45/32 -j SNAT --to-source **
-A POSTROUTING -s 10.0.3.154/32 -j SNAT --to-source **
-A POSTROUTING -s 10.0.3.129/32 -j SNAT --to-source **