Due to various reasons, the company router only opens two ports, including one we'll refer to as port 6000, and prohibits further port openings or port forwarding. The broadband connection is a 500-megabit dedicated line with symmetrical upload and download speeds, and the IP address is fixed. Furthermore, the router's IP address is 192.168.1.1, while the internal server's IP address is 192.168.1.99. The server has installed wg and nftables, with wg using port 5000. To configure nftables to forward the server's port 5000 traffic to the router's port 6000, we need to consider the specific requirements of our network topology and security policies. This configuration allows us to maintain network segregation while enabling communication between the server and the router. It is essential to ensure that the nftables rules are correctly configured to allow traffic to pass through while adhering to our security standards.