Jenny asked:
Thanks! What is the relevance of the -are they ports?- numbers in square brackets, like :PREROUTING ACCEPT [573:36591]?
Damn I was hoping that you wouldn't ask that! ;-)
I think they might be counters (so not essential), but the man pages for iptables-save and iptables-restore aren't exactly clear and I've never dug further. Try deleting them and see if it still works? I can't because I'm not masquerading at the moment. I'm doing something far worse which I'm not going to document until it doesn't matter as much to me if the ISPs block it!
On that note, I should write up my tribulations with openvpn on Android some time. Any ALUGger got it working nicely?
Hope that helps,