diff --git a/scripts/r2_nat.ruleset b/scripts/r2_nat.ruleset
new file mode 100644
index 0000000000000000000000000000000000000000..46326ee47750551990c5c0c4cce74fab29165c88
--- /dev/null
+++ b/scripts/r2_nat.ruleset
@@ -0,0 +1,10 @@
+#!/usr/sbin/nft -f
+
+flush ruleset
+
+table ip ns-nat {
+    chain ns-masq {
+        type nat hook postrouting priority 100;
+        oifname "ns2-veth0" counter masquerade
+    }
+}