# {{ansible_managed}} -- {{type}} test

flush ruleset

table ip nat {
        # DNAT
        chain prerouting {
                type nat hook prerouting priority dstnat;

		# translate inbound destination address and port
                iif eth0 tcp dport 2201 dnat 10.1.1.1:22
                iif eth0 tcp dport 2203 dnat 10.1.1.3:22
        }

        # SNAT
        chain postrouting {
                type nat hook postrouting priority srcnat;

		# translate outbound source address
                oif eth0 ip saddr 10.1.1.0/24 snat 192.168.122.102
        }
}