table inet firewall { chain to_renater { accept } chain from_renater { } chain snat_renater { log group 1 prefix "snat renater:" masquerade } }