$ 0 0 Something like below, fill in your WAN IP instead of 1.1.1.1Instead of destport 123, using src port=123 might work as well