Throw our billing (using libpcap) I see than on external interface (eth1) on our gateway there are outbound packets with source IP from local network. This is the iptables rule for SNAT:
-t NAT -A POSTROUTING -o eth1 -j SNAT --to-source external-IP
Now I use tcpdump to shiff this packets to show it's content. But I'm confused.