flush ruleset table inet firewall_and_nat { chain samoojaverkko_input { accept } chain wireguard_input { accept } chain input { type filter hook input priority filter; policy drop; iifname lo accept ct state invalid drop ct state { established, related } accept iifname wlp2s0 jump samoojaverkko_input iifname wg0 jump wireguard_input } chain forward { type filter hook forward priority filter; policy drop; ct state invalid drop ct state { established, related } accept iifname wlp2s0 accept iifname wg0 accept } chain output { type filter hook output priority filter; policy accept; } chain nat_masquerade { type nat hook postrouting priority srcnat; oifname enp1s0 ip saddr 192.168.0.0/16 masquerade } }