user@er12# show service nat
 rule 1 {
     description "Policy dNAT: Force LAN DNS Requests to Router"
     destination {
         address !192.168.1.7-192.168.1.10
         port 53
     }
     inbound-interface switch0
     inside-address {
         address 192.168.1.7-192.168.1.10
         port 53
     }
     log enable
     protocol tcp_udp
     source {
         address !192.168.1.7-192.168.1.10
     }
     type destination
 }
 rule 5010 {
     description "Masquerade for WAN"
     log disable
     outbound-interface eth0
     protocol all
     type masquerade
 }
 rule 5011 {
     description "Masquerade for DNS Redirect"
     destination {
         group {
             address-group Pihole
         }
         port 53
     }
     log disable
     outbound-interface switch0
     protocol tcp_udp
     source {
         address 192.168.1.31-192.168.1.250     }
     type masquerade
 }