bash-5.1# iptables -A FORWARD -i nm-OG -j ACCEPT; iptables -A FORWARD -o nm-OG -j ACCEPT; iptables -t nat -A POSTROUTING -o ens160 -j MASQUERADE
bash-5.1#  iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
DOCKER_OUTPUT  all  --  anywhere             localhost

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
DOCKER_POSTROUTING  all  --  anywhere             localhost
MASQUERADE  all  --  anywhere             anywhere
MASQUERADE  all  --  anywhere             anywhere
MASQUERADE  all  --  anywhere             anywhere
MASQUERADE  all  --  anywhere             anywhere
MASQUERADE  all  --  anywhere             anywhere
MASQUERADE  all  --  anywhere             anywhere

Chain DOCKER_OUTPUT (1 references)
target     prot opt source               destination
DNAT       tcp  --  anywhere             localhost            tcp dpt:domain to:127.0.0.11:41689
DNAT       udp  --  anywhere             localhost            udp dpt:domain to:127.0.0.11:50629

Chain DOCKER_POSTROUTING (1 references)
target     prot opt source               destination
SNAT       tcp  --  localhost            anywhere             tcp spt:41689 to::53
SNAT       udp  --  localhost            anywhere             udp spt:50629 to::53