(type:EXECVE a0:iptables a1:\-t a2:nat) ("\-\-to\-ports\ 42" OR "\-\-to\-ports\ 43")