iptables -t nat -P PREROUTING ACCEPT

//- How to provide access for VE to Internet
iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to MY_PUBLIC_IP

//- How to provide access from Internet to a VE
iptables -t nat -P PREROUTING ACCEPT

iptables -t nat -A PREROUTING -p tcp -d 192.168.1.8 --dport
 3784 -i eth0 -j DNAT --to-destination MY_PUBLIC_IP:3784

iptables -t nat -A PREROUTING -p udp -d 192.168.1.8 --dport
 3784 -i eth0 -j DNAT --to-destination MY_PUBLIC_IP:3784

iptables -t nat -A PREROUTING -p TCP --dport 3784
 -j DNAT --to-destination 192.168.1.8:3784

/sbin/iptables -t nat -A POSTROUTING -s ! 192.168.1.8
 -o venet0 -j SNAT --to-source 192.168.1.8