*nat
-A POSTROUTING -s 192.168.16.0/24 -o eno4 -j MASQUERADE
COMMIT

*filter
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT