import type { TNftFamily, INftDnatRule, INftSnatRule, INftMasqueradeRule } from './nft.types.js';
/**
 * Build DNAT rules for port forwarding.
 * Generates DNAT + optional masquerade for each protocol.
 * Direct port of Rust build_dnat_rule.
 */
export declare function buildDnatRules(tableName: string, family: TNftFamily, rule: INftDnatRule): string[];
/**
 * Build an SNAT rule to rewrite source address.
 */
export declare function buildSnatRule(tableName: string, family: TNftFamily, rule: INftSnatRule): string[];
/**
 * Build a masquerade rule for outgoing NAT.
 */
export declare function buildMasqueradeRule(tableName: string, family: TNftFamily, rule: INftMasqueradeRule): string[];