iptables (redirect captive portal)

iptables --table nat --append POSTROUTING --out-interface ens33 -j MASQUERADE

iptables --append FORWARD --in-interface at0 -j ACCEPT

iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 192.168.1.12:80

iptables -t nat -A POSTROUTING -j MASQUERADE