@def $dn42_ip4 = @resolve(dn42, A);
@def $dn42_ip6 = @resolve(dn42, AAAA);
domain (ip ip6) table filter chain FORWARD proto udp dport 5001:5020 daddr @ipfilter(($dn42_ip4 $dn42_ip6)) interface $bridge ACCEPT;
domain (ip ip6) table nat chain PREROUTING interface $internet proto udp dport 5001:5020 DNAT to @ipfilter(($dn42_ip4 $dn42_ip6));

# openvpn client server
&def_service(evenet, dn42, udp, 123);
&forward_to_service(evenet, udp, 123);
&def_service(evenet, dn42, tcp, 993);
&forward_to_service(evenet, tcp, 993);