# port forwarding
*nat
:PREROUTING ACCEPT [0:0]
# flush rules so no duplicates are added
-F
# forward :3217 to wireguard listening on :5226
-A PREROUTING -p udp --dport 3217 -j REDIRECT --to-port 5226
COMMIT