define nic = eth0

flush ruleset

#
# DNAT
#

table ip nat {
        chain prerouting {
                type nat hook prerouting priority dstnat;

                iif $nic tcp dport 2222 dnat 10.0.0.22:22
        }
}

table ip6 nat {
        chain prerouting {
                type nat hook prerouting priority dstnat;

                iif $nic tcp dport 2222 dnat [beef::beef:22]:22
        }
}

#
# SNAT
#

table ip nat {
        chain postrouting {
                type nat hook postrouting priority srcnat;

                ip saddr 10.0.0.0/24 oif $nic snat 192.168.122.21
        }
}

table ip6 nat {
        chain postrouting { 
                type nat hook postrouting priority srcnat;

                ip6 saddr beef::beef:0/112 oif $nic snat baaf::baaf:21
        }
}