/ # ip rule
0: from all lookup local
32762: from all iif eth3 lookup 102
32763: from all iif eth2 lookup 101
32764: from 192.168.1.102 lookup 102
32765: from 192.168.1.101 lookup 101
32766: from all lookup main
32767: from all lookup default
/ # ip route show table 101
default dev eth2 scope link
123.123.123.123 dev eth2 scope link
124.124.124.124 dev eth3 scope link
127.0.0.0/8 dev lo scope link
192.168.1.0/24 dev bridge0 scope link
/ # ip route show table 102
default dev eth3 scope link
123.123.123.123 dev eth2 scope link
124.124.124.124 dev eth3 scope link
127.0.0.0/8 dev lo scope link
192.168.1.0/24 dev bridge0 scope link
/ # ip route show table main
123.123.123.123 dev eth2 proto kernel scope link src 123.123.123.123
124.124.124.124 dev eth3 proto kernel scope link src 124.124.124.124
192.168.1.0/24 dev bridge0 proto kernel scope link src 192.168.1.1
/ # iptables -nvL
Chain INPUT (policy ACCEPT 2525 packets, 347K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 11736 packets, 4120K bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 1778 packets, 236K bytes)
pkts bytes target prot opt in out source destination
/ # iptables -nvL -t nat
Chain PREROUTING (policy ACCEPT 4295 packets, 781K bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 1028 packets, 70507 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 239 packets, 18699 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 2262 packets, 178K bytes)
pkts bytes target prot opt in out source destination
1048 93591 MASQUERADE all -- * eth2 0.0.0.0/0 0.0.0.0/0
908 64448 MASQUERADE all -- * eth3 0.0.0.0/0 0.0.0.0/0