#!/usr/sbin/nft -f flush ruleset table inet filter { chain input { type filter hook input priority filter; } chain forward { type filter hook forward priority filter; } chain output { type filter hook output priority filter; } } table inet nat { chain postrouting { type nat hook postrouting priority srcnat; ip saddr 10.0.0.0/24 oifname "enp3s0" masquerade } }