1 :PREROUTING 2 *nat 3 -j DNAT --to-destination 1.1.1.1;=;OK 4 -j DNAT --to-destination 1.1.1.1-1.1.1.10;=;OK 5 -p tcp -j DNAT --to-destination 1.1.1.1:1025-65535;=;OK 6 -p tcp -j DNAT --to-destination 1.1.1.1-1.1.1.10:1025-65535;=;OK 7 -p tcp -j DNAT --to-destination 1.1.1.1-1.1.1.10:1025-65536;;FAIL 8 -j DNAT;;FAIL 9