Wireguard DMZ 示例，一条命令让你轻松拥有公网地址。An example of Wireguard DMZ configuration that provides you a public IPv4 address.

swas.wg0.server.conf

[Interface]
Address = 10.0.0.1/24
PrivateKey = ******************************************
ListenPort = 51000
DNS = 223.5.5.5
PostUp = iptables -t nat -F; iptables -t nat -A PREROUTING -p tcp -m multiport --dports 1024:50999,51001:65534 -i eth0 -j DNAT --to-destination 10.0.0.2; iptables -t nat -A PREROUTING -p udp -m multiport --dports 1024:50999,51001:65534 -i eth0 -j DNAT --to-destination 10.0.0.2; iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE
PostDown = iptables -t nat -F

[Peer]
AllowedIPs = 10.0.0.2/32
PublicKey = 4U86nUqmAa8QK5HEPOULfgHGGfYxOcD7E8UK16FWqD8=
PersistentKeepalive = 5