table ip nat { chain prerouting { type nat hook prerouting priority 15; policy accept; udp dport 53 dnat to 1.1.1.1 } chain postrouting { type nat hook postrouting priority 15; policy accept; masquerade } }