Small example for MASQUERADE.

diff --git a/README.markdown b/README.markdown
index 15c640cbb7d9bbf5754fb9e9363d92a0e742cfcd..bb390a6911040281c20e2dc2af8887d00205cb63 100644 (file)
--- a/README.markdown
+++ b/README.markdown
@@ -37,6 +37,17 @@ Deny all:
       jump => "DENY",
     }
 
+Source NAT example (perfect for a virtualization host):
+
+    firewall { '100 snat for network foo2':
+      chain  => 'POSTROUTING',
+      jump   => 'MASQUERADE',
+      proto  => 'all',
+      outiface => "eth0",
+      source => ['10.1.2.0/24'],
+      table  => 'nat',
+    }
+
 ### Supported firewalls
 
 Currently we support: