Masquerade a LAN behind one WAN address and forward chosen ports to LAN hosts, as nftables and iptables rules, with the sysctl that turns routing on.
All generators
tools.arewel.com needs JavaScript: the configs are generated in your browser.