*nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] -A PREROUTING -d ENP_IP -i lo -j DNAT --to-destination LO_IP -A POSTROUTING -s LO_IP -o enp0s3 -j SNAT --to-source ENP_IP COMMIT *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -i lo -j ACCEPT -A FORWARD -i lo -o enp0s3 -j ACCEPT -A FORWARD -i enp0s3 -o lo -j ACCEPT -A OUTPUT -o lo -j ACCEPT COMMIT