@def $dn42_ip4 = @resolve(dn42, A); @def $dn42_ip6 = @resolve(dn42, AAAA); domain (ip ip6) table filter chain FORWARD proto udp dport 5001:5020 daddr @ipfilter(($dn42_ip4 $dn42_ip6)) interface $bridge ACCEPT; domain (ip ip6) table nat chain PREROUTING interface $internet proto udp dport 5001:5020 DNAT to @ipfilter(($dn42_ip4 $dn42_ip6)); # openvpn client server &def_service(evenet, dn42, udp, 123); &forward_to_service(evenet, udp, 123); &def_service(evenet, dn42, tcp, 993); &forward_to_service(evenet, tcp, 993);