*nat
    :PREROUTING ACCEPT [0:0]
    -A PREROUTING -i enp0s8 -p tcp --dport 8080 -j DNAT --to 10.0.3.101:80
    COMMIT

    # comments blah blah and the rest of the file, like,
    *filter
    ...