On Wednesday, August 2nd, 2023 at 03:17, Mucha Marcin, Sieciuch.com <m.mucha@xxxxxxxxxxxx> wrote: > > chain source-nat { > type nat hook postrouting priority 100; policy accept; > ct state invalid drop; > oif enp7s0 ip saddr maps {10.0.0.0/24 : 192.168.10.8, 10.1.0.0/24 : 192.168.10.9}; > } I believe you are missing the "snat" operation in the second clause of the rule: oif enp7s0 snat ip saddr maps {10.0.0.0/24 : 192.168.10.8, This guy ------ ^^^^ Eric