## XXXvlab: these should be set in metadata with a common option for
##  docker and LXC/shorewall

DNAT     net     lan:%%NAME%%:80     tcp    80
DNAT     net     lan:%%NAME%%:443    tcp    443

DNAT     lan     lan:%%NAME%%:80     tcp    80    -  %%HOST_INTERNET_IP%%
DNAT     lan     lan:%%NAME%%:443    tcp    443   -  %%HOST_INTERNET_IP%%

DNAT     fw      lan:%%NAME%%:80     tcp    80    -  %%HOST_INTERNET_IP%%
DNAT     fw      lan:%%NAME%%:443    tcp    443   -  %%HOST_INTERNET_IP%%