the *nat table

*nat

:PREROUTING ACCEPT [0:0]

:INPUT ACCEPT [0:0]

:OUTPUT ACCEPT [0:0]

:POSTROUTING ACCEPT [0:0]

# p4p1 is WAN interface, p1p1 is LAN interface

-A POSTROUTING -o p4p1 -j MASQUERADE

COMMIT