[network interface]
                  |
          PREROUTING in raw
          connection tracking
          PREROUTING in mangle
          PREROUTING in nat
                  |
          <routing decision>
              /       \
 (for local host)  (for remote host)
         |                |
 INPUT in mangle   FORWARD in mangle
 INPUT in filter   FORWARD in filter
         |         POSTROUTING in mangle
 [local process]   POSTROUTING in nat
         |                |
 OUTPUT in raw            |
 connection tracking      |
 OUTPUT in mangle         |
 OUTPUT in nat            |
 OUTPUT in filter         |
 POSTROUTING in mangle    |
 POSTROUTING in nat      /
            \          / 
          [network interface]