6 post-up iptables -t nat -A POSTROUTING -s '10.0.0.0/24' -o vmbr0 -j SNAT --to-source 192.168.0.1
7 post-down iptables -t nat -D POSTROUTING -s '10.0.0.0/24' -o vmbr0 -j SNAT --to-source 192.168.0.1
8 post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
9 post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1