*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-F
-A PREROUTING -i eth0 -p tcp --dport 8333 -j DNAT --to-destination ip_full_node:8333
-A POSTROUTING -p tcp -d ip_full_node --dport 8333 -j SNAT --to-source ip_of_uwf_server
-A POSTROUTING -s 10.8.0.0/8 -o eth0 -j MASQUERADE
COMMIT
Based on: https://serverfault.com/a/586553