Iptables

#Filter Tables;

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
nova-network-INPUT  all  --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere            udp dpt:bootps
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:bootps

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
nova-filter-top  all  --  anywhere             anywhere
nova-network-FORWARD  all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             192.168.122.0/24    state RELATED,ESTABLISHED
ACCEPT     all  --  192.168.122.0/24     anywhere
ACCEPT     all  --  anywhere             anywhere
REJECT     all  --  anywhere             anywhere            reject-with icmp-port-unreachable
REJECT     all  --  anywhere             anywhere            reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
nova-filter-top  all  --  anywhere             anywhere
nova-network-OUTPUT  all  --  anywhere             anywhere

Chain nova-filter-top (2 references)
target     prot opt source               destination
nova-network-local  all  --  anywhere             anywhere

Chain nova-network-FORWARD (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere

Chain nova-network-INPUT (1 references)
target     prot opt source               destination

Chain nova-network-OUTPUT (1 references)
target     prot opt source               destination

Chain nova-network-local (1 references)
target     prot opt source               destination

# Nat tables;

$ sudo iptables -L -t nat;
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
nova-network-PREROUTING  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
nova-network-OUTPUT  all  --  anywhere             anywhere

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
nova-network-POSTROUTING  all  --  anywhere             anywhere
nova-postrouting-bottom  all  --  anywhere             anywhere
MASQUERADE  tcp  --  192.168.122.0/24    !192.168.122.0/24    masq ports: 1024-65535
MASQUERADE  udp  --  192.168.122.0/24    !192.168.122.0/24    masq ports: 1024-65535
MASQUERADE  all  --  192.168.122.0/24    !192.168.122.0/24

Chain nova-network-OUTPUT (1 references)
target     prot opt source               destination
DNAT       all  --  anywhere             10.2.48.47          to:10.0.0.2

Chain nova-network-POSTROUTING (1 references)
target     prot opt source               destination
ACCEPT     all  --  10.0.0.0/8           10.128.0.0/24
ACCEPT     all  --  10.0.0.0/8           10.0.0.0/8

Chain nova-network-PREROUTING (1 references)
target     prot opt source               destination
DNAT       all  --  anywhere             10.2.48.47          to:10.0.0.2
DNAT       tcp  --  anywhere             169.254.169.254     tcp dpt:www to:10.2.48.50:8773

Chain nova-network-floating-snat (1 references)
target     prot opt source               destination
SNAT       all  --  10.0.0.2             anywhere            to:10.2.48.47

Chain nova-network-snat (1 references)
target     prot opt source               destination
nova-network-floating-snat  all  --  anywhere             anywhere
SNAT       all  --  10.0.0.0/8           anywhere            to:10.2.48.50

Chain nova-postrouting-bottom (1 references)
target     prot opt source               destination
nova-network-snat  all  --  anywhere             anywhere