# {{ansible_managed}} -- {{type}} test

flush ruleset

table ip nat {
        # DNAT
        chain prerouting {
                type nat hook prerouting priority dstnat;

		# translate inbound destination address
                iif eth0 tcp dport 22 dnat 10.1.1.1
        }

        # SNAT
        chain postrouting {
                type nat hook postrouting priority srcnat;

		# translate inbound source address (full-nat)
                oif eth1 ip daddr 10.1.1.0/24 snat 10.1.1.2
        }
}