iptables -t nat -A PREROUTING -j prerouting_rule
  iptables -t nat -A POSTROUTING -j postrouting_rule

  iptables -t nat -A POSTROUTING -o $WAN -j MASQUERADE