In order to see if you have a DNAT/SNAT rule flagged to log, you have to edit the rule.
As in the display of packet filter rules, we need a pencil displayed in the DNAT/SNAT rule.
Cheers - Bob
Folks, this is just an incredible number of things. The Astaro has been a great high-end VW, but this level of "finishing" ("finition" in French) instantly brings Astaro up to a Mercedes level. Wow. I'm humbled. Bravo!