1 files changed, 9 insertions, 0 deletions
diff --git a/iptables-fullconenat.install b/iptables-fullconenat.install
new file mode 100644
index 000000000000..59754dc39862
--- /dev/null
+++ b/iptables-fullconenat.install
@@ -0,0 +1,9 @@
+post_install(){
+    echo "Assuming eth0 is WAN interface:"
+    echo -e "\tiptables -t nat -A POSTROUTING -o eth0 -j FULLCONENAT #same as MASQUERADE"
+    echo -e "\tiptables -t nat -A PREROUTING -i eth0 -j FULLCONENAT  #automatically restore NAT for inbound packets"
+}
+
+post_upgrade() {
+    post_install
+}