firewall/config/networks/renater.nft

table inet firewall {

	chain to_renater {
		accept
	}

	chain from_renater {
	}

	chain snat_renater {
		log group 1 prefix "snat renater:" masquerade
	}

}