iptables -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE