define nic = eth0 flush ruleset table inet nat { # # inbound # chain prerouting { type nat hook prerouting priority dstnat; iif $nic ip saddr 0/0 tcp dport 2222 dnat 10.0.0.22:22 iif $nic ip6 saddr ::/0 tcp dport 2222 dnat [fc00::beef:22]:22 } # # outbound # chain postrouting { type nat hook postrouting priority srcnat; ip saddr 10.0.0.0/24 oif $nic snat 192.168.122.21 ip6 saddr fc00::beef:0/112 oif $nic snat baaf::baaf:21 } }