В iptables не срабатывает следующее правило.
$IPTABLES -t nat -A POSTROUTING -o eth0 -s 192.168.1.0/24 -j SNAT --to-source 192.168.0.2
iptables -t nat -L -v -n
Chain PREROUTING (policy ACCEPT 151 packets, 9126 bytes)
pkts bytes target prot opt in out source destination
0 0 REDIRECT tcp -- * * 192.168.2.0/24 0.0.0.0/0 tcp dpt:80 redir ports 3128
Chain INPUT (policy ACCEPT 99 packets, 5940 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 69 packets, 4177 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 69 packets, 4177 bytes)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE all -- * eth0 192.168.2.0/24 0.0.0.0/0