example config for ppoe router

hard cases make bad law

nat.nft

@@ -0,0 +1,16 @@
+#!/usr/bin/nft -f
+
+flush ruleset
+
+table ip nat {
+	chain prerouting {
+		type nat hook prerouting priority 0; policy accept;
+	}
+
+	# for all packets to WAN, after routing, replace source address with primary IP of WAN interface
+	chain postrouting {
+		type nat hook postrouting priority 100; policy accept;
+		oifname "ppp0" masquerade
+	}
+}
+