nftables.rules

table ip filter {
        chain input {
                type filter hook input priority 0; policy accept;
        }

        chain output {
                type filter hook output priority 0; policy accept;
        }

        chain forward {
                type filter hook forward priority 0; policy accept;
        }
}
table ip nat {
        chain prerouting {
                type nat hook prerouting priority 0; policy accept;
                counter packets 780376 bytes 46823635 comment "count accepted packets" # handle 5
        }

        chain input {
                type nat hook input priority 0; policy accept;
                counter packets 42 bytes 3307 comment "count accepted packets" # handle 6
        }

        chain output {
                type nat hook output priority 0; policy accept;
                counter packets 13 bytes 1070 comment "count accepted packets" # handle 7
        }

        chain postrouting {
                type nat hook postrouting priority 100; policy accept;
                ip saddr 10.0.0.0/16 oif "eth0" masquerade # handle 8
        }
}