iptables -P FORWARD  ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

table ip FILTER {
        chain INPUT {
                type filter hook input priority 0; policy accept;
                tcp dport ssh accept
                ct state established,related counter packets 178 bytes 14723 accept
                drop
                iif lo accept
        }

        chain OUTPUT {
                type filter hook output priority 0; policy accept;
                oif lo accept
                accept
        }
}
table ip NAT {
}