# Generated by iptables-save
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
# NAT for Pi gadget
-A POSTROUTING -s 192.168.2.0/24 -o enp3s0 -j MASQUERADE
COMMIT

*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
# Forward rules for Pi gadget
-A FORWARD -i enp0s20f0u1u2 -o enp3s0 -j ACCEPT
-A FORWARD -i enp3s0 -o enp0s20f0u1u2 -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT