# {{ansible_managed}} -- {{type}} test

# this one doesnt work (drop) - gets stuck while answering to the gw
# while the gw doesnt translate back destination to the origniating source
# [DESTROY] tcp      6 TIME_WAIT src=10.1.1.2 dst=10.1.1.1 sport=39146 dport=22 src=10.1.1.1 dst=10.1.1.2 sport=22 dport=39146 [ASSURED]

flush ruleset

table ip nat {
        # DNAT
        chain prerouting {
                type nat hook prerouting priority dstnat;

                # translate inbound destination address
                iif eth0 tcp dport 22 dnat 10.1.1.1
        }

	# SNAT
        chain postrouting {
        type filter hook postrouting priority mangle;

		# translate inbound source address (stateless)
                oif eth1 ip daddr 10.1.1.0/24 ip saddr set 10.1.1.2
        }
}