# {{ansible_managed}} - {{type}} test

flush ruleset

table ip stateless-nat {
    # DNAT
    chain prerouting {
        type filter hook prerouting priority mangle;

	# translate inbound destination address (stateless)
        iif eth0 tcp dport 22 ip daddr set 10.1.1.1
    }

    # SNAT
    chain postrouting {
    type filter hook postrouting priority mangle;

	# translate outbound source address (stateless)
        # handle multiple dnat hosts and/or ports on the way back
        oif eth0 ip saddr 10.1.1.0/24 ip saddr set 192.168.122.102
    }
}