#! /sbin/nft -f table inet firewall { chain to_admin { accept } chain from_admin { } } table nat { chain admin_nat { snat to $ip_self_public } }