@def $dn42_ip4 = @resolve(dn42, A);
@def $dn42_ip6 = @resolve(ipv6.dn42.eve.higgsboson.tk, AAAA);
domain (ip ip6) table filter chain FORWARD proto udp dport 5001:5020 daddr @ipfilter(($dn42_ip4 $dn42_ip6)) ACCEPT;
domain (ip ip6) table nat chain PREROUTING interface $internet proto udp dport 5001:5020 DNAT to @ipfilter(($dn42_ip4 $dn42_ip6));

# openvpn client server
&def_service(evenet, dn42, udp, 21);
&forward_to_service(evenet, udp, 21);
&forward_to_service(evenet, udp, 123);
&forward_to_service(evenet, udp, openvpn);
&def_service(evenet-tcp, dn42, tcp, 993);
&forward_to_service(evenet-tcp, tcp, 933);