iptables -N LOG_DROP iptables -I FORWARD -s 10.0.0.0/16 -d 10.0.0.0/16 -j LOG_DROP iptables -A LOG_DROP -j LOG --log-prefix "refused connection: " iptables -A LOG_DROP -j DROP iptables -A FORWARD -i enp5s0f0 -o enp9s0f0 -j ACCEPT iptables -A FORWARD -i enp5s0f0 -o enp9s0f0 -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -t nat -A POSTROUTING -o enp9s0f0 -j MASQUERADE #iptables -A FORWARD -j DROP