#!/bin/bash
# Test-Ersatz (Proxmox-Host, Hetzner-typisch: vmbr0 oeffentlich 203.0.113.10/26, vmbr1 privat 10.10.10.1/24)
echo "*nat"
echo ":PREROUTING ACCEPT [0:0]"
echo ":POSTROUTING ACCEPT [0:0]"
[ "${STUB_NO_MASQ:-0}" = 1 ] || echo "-A POSTROUTING -s 10.10.10.0/24 -o vmbr0 -j MASQUERADE"
[ "${STUB_DNAT:-0}" = 1 ] && echo "-A PREROUTING -i vmbr0 -p udp -m udp --dport 51820 -j DNAT --to-destination 10.10.10.50:51820"
echo "COMMIT"
