root@melampus:~# cat /etc/nftables.conf table ip nat { chain postrouting { type nat hook postrouting priority srcnat; policy accept; masquerade } chain prerouting { type nat hook prerouting priority dstnat; policy accept; ip daddr 147.251.50.157 tcp dport { 15022 } dnat to 192.168.9.250:22 ip daddr 147.251.50.157 tcp dport { 14022 } dnat to 192.168.9.142:22 } } root@melampus:~# nft list ruleset table ip nat { chain postrouting { type nat hook postrouting priority srcnat; policy accept; masquerade } chain prerouting { type nat hook prerouting priority dstnat; policy accept; ip daddr 147.251.50.157 tcp dport { 15022 } dnat to 192.168.9.250:22 ip daddr 147.251.50.157 tcp dport { 14022 } dnat to 192.168.9.142:22 } } table ip6 filter { chain LIBVIRT_INP { } chain INPUT { type filter hook input priority filter; policy accept; counter packets 688 bytes 49214 jump LIBVIRT_INP } chain LIBVIRT_OUT { } chain OUTPUT { type filter hook output priority filter; policy accept; counter packets 35 bytes 1960 jump LIBVIRT_OUT } chain LIBVIRT_FWO { } chain FORWARD { type filter hook forward priority filter; policy accept; counter packets 0 bytes 0 jump LIBVIRT_FWX counter packets 0 bytes 0 jump LIBVIRT_FWI counter packets 0 bytes 0 jump LIBVIRT_FWO } chain LIBVIRT_FWI { } chain LIBVIRT_FWX { } } table ip6 nat { chain LIBVIRT_PRT { } chain POSTROUTING { type nat hook postrouting priority srcnat; policy accept; counter packets 0 bytes 0 jump LIBVIRT_PRT } } table ip6 mangle { chain LIBVIRT_PRT { } chain POSTROUTING { type filter hook postrouting priority mangle; policy accept; counter packets 35 bytes 1960 jump LIBVIRT_PRT } } root@melampus:~#