table inet firewall { chain to_dmz_wireguard { accept } chain from_dmz_wireguard { accept } }