auto lo
iface lo inet loopback
iface eno1 inet manual
iface enp2s0 inet manual
auto vmbr0
iface vmbr0 inet static
address 89.108.111.16/22
gateway 89.108.108.1
bridge-ports eno1
bridge-stp off
bridge-fd 0
uto vmbr1
auto vmbr1
iface vmbr1 inet static
address 10.10.10.1/24
bridge-ports none
bridge-stp off
bridge-fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE
post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1