My LAN interfaces are ens3/ens8/ens9. VPN tunnel set up using openvpn, gets dev tun0. NFTables config file /etc/nftables.conf (do not forget to enable the nftables services): Thanks to: https://superuser.com/questions/985800/complete-masquerading-nat-example-using-nftables-on-linux/1225109#1225109