"netstat -M", only for iptables/NAT