Licson Lee says to 電訊台
iptables -P FORWARD ALLOW iptables -t nat -A POSTROUTING -s 10.0.2.0/24 -j MASQUERADE