#!/usr/sbin/nft -f flush ruleset table inet filter { chain input { type filter hook input priority 0; } chain forward { type filter hook forward priority 0; } chain output { type filter hook output priority 0; } } table ip nat { chain postrouting { type nat hook postrouting priority 0; policy accept; oifname "lokitun0" ip saddr 10.3.141.0/24 counter masquerade counter masquerade } }