use warnings;
use strict;

use Hic;
# sub hiccup (&@);

my $lanCidr = 'WHATEVER';
my $dmzIp   = 'SOMEWHERE';
my %ipAddress = qw(HERE we_are  THERE it_goes  EVERYWHERE at_once);
my @array     = qw(WIBBLE BOFF);

my $s = << "EOF";
iptables -t nat -N outbound-DMZ
@{[ hiccup {
    "iptables -t nat -s $lanCidr -o $_ -j SNAT --to-source $dmzIp"
    } keys %ipAddress ]}
whatever else here
@{[ hiccup {
    "flocculate -f $_ -j SNAT --to-source $dmzIp"
    } @array ]}
iptables -t nat -A outbound-DMZ -j RETURN
EOF

# sub hiccup (&@) { return join "\n", map $_[0]->(), @_[ 1 .. $#_ ]; }

print "[[$s]]";