flush ruleset table inet filter { chain input { type filter hook input priority filter; } chain forward { type filter hook forward priority filter; } chain output { type filter hook output priority filter; } } table ip nat { chain postrouting { type nat hook postrouting priority 100; ip saddr 0.0.0.0/0 oifname "tun*" masquerade; } }