table inet filter { chain input { type filter hook input priority filter; policy accept; } chain forward { type filter hook forward priority filter; policy accept; } chain output { type filter hook output priority filter; policy accept; } } table ip nat { chain POSTROUTING { type nat hook postrouting priority srcnat; policy accept; oifname "enp0s3" counter packets 0 bytes 0 masquerade } chain PREROUTING { type nat hook prerouting priority dstnat; policy accept; ip saddr 192.168.56.1 ip daddr 192.168.56.100 tcp dport 10001 counter packets 0 bytes 0 dnat to 172.17.0.2:22 } }