table inet nat {
    chain prerouting {
        type nat hook prerouting priority dstnat
        iifname eth0 tcp dport { 80, 443 } dnat ip to 192.0.2.2
    }

    chain postrouting {
        type nat hook postrouting priority srcnat
        oifname eth0 masquerade
    }
}