Licson Lee says to 電訊台
iptables -t nat -A PREROUTING -p tcp --dport 25565 -j DNAT --to [Zerotier IP]