ferm table nat { chain PREROUTING { } chain POSTROUTING { # masqarade to wan saddr 10.0.10.0/24 outerface ens192 MASQUERADE; }}