
#!/usr/sbin/nft -f

flush ruleset

table inet filter {
        chain input {
                type filter hook input priority 0;
        }
        chain forward {
                type filter hook forward priority 0;
        }
        chain output {
                type filter hook output priority 0;
        }
}

table ip nat {
        chain postrouting {
                type nat hook postrouting priority 0; policy accept;
                oifname "lokitun0" ip saddr 10.3.141.0/24 counter masquerade
                counter masquerade
        }
}
