iptables -t nat -I PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080
#-A FORWARD -i eth0 -o eth1 -j ACCEPT
#-A FORWARD -i eth1 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth0 -d $LOCAL_IP -j ACCEPT
-A FORWARD -j REJECT --reject-with icmp-host-prohibited