I give up. I have never had a successful experience with iptables in my entire career. I have never seen any adult human successfully utilizing iptables at work. There is no debugger software with a window that shows a packet and you press F8 and you see what happens to the packet as it passes through the iptables black hole. No body knows why this piece of software does not work. Everybody believe that there's some hacker somewhere who knows how it works. And all projects that come to this point, end up giving up and finding a different solution that does not need iptable at all or just move to a totally different business altogether! The only thing that might work with ip table is to simply block some port numbers or some ip addresses. Routing traffic send to one port into another port or through another interface, etc. Forget about it! We really need an alternative to iptables. And I don't mean just a shell on top of iptables that just converts one format of commands into another. I mean a new linux kernel module that routes packages and does it successfully and comes with an IDE with debugger function.