Forwarding ports over WireGuard manually requires a long chain of firewall commands. tun-nat replaces them with a single configuration file on top of nftables. Step 1. Installation Requirement: the tool works only with nftables. Check: nft --version; if the command is not found - sudo apt install nftables. sudo git clone https://github.com/lashkinse/tun-nat.git /etc/tun-nat No git? Run this first: sudo apt install git. Step 2. Configuration Open /etc/tun-nat/config.toml and adjust it to your needs: ...