Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
DNAT       tcp  --  82.200.18.65         anywhere            tcp dpt:3389 to:192.168.31.2

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
SNAT       all  --  anywhere             anywhere            source IP range 192.168.30.191-192.168.30.200 to:85.21.250.18
SNAT       all  --  anywhere             anywhere            source IP range 192.168.30.165-192.168.30.190 to:85.21.250.18
SNAT       all  --  anywhere             anywhere            source IP range 192.168.30.101-192.168.30.164 to:85.21.250.18
SNAT       all  --  anywhere             anywhere            source IP range 192.168.31.1-192.168.31.23 to:85.21.250.18

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination