auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr0 inet static
    address  xxx.xxx.xxx.xxx
    netmask  255.255.255.0
    gateway  xxx.xxx.xxx.xxx
    bridge_ports eno1
    bridge_stp off
    bridge_fd 0

auto vmbr3
iface vmbr3 inet static
    address  192.168.1.1
    netmask  255.255.255.0
    bridge_ports none
    bridge_stp off
    bridge_fd 0
    post-up echo 1 > /proc/sys/net/ipv4/ip_forward
    post-up iptables -t nat -A POSTROUTING -s '192.168.1.0/24' -o vmbr0 -j MASQUERADE
    post-down iptables -t nat -D POSTROUTING -s '192.168.1.0/24' -o vmbr0 -j MASQUERADE
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1443 -j DNAT --to 192.168.1.2:443
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1443 -j DNAT --to 192.168.1.2:443
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 180 -j DNAT --to 192.168.1.2:80
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 180 -j DNAT --to 192.168.1.2:80
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 223 -j DNAT --to 192.168.1.2:223
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 223 -j DNAT --to 192.168.1.2:223