search for: dstnat

...Reporter: david at hajes.org running latest Debian 10 in VPS/KVM - nftables v0.9.2 (Scram) nftables are initialized by scripts. I have following tables/chains table ip nat { set bad_ip { type ipv4_addr } chain prerouting { type nat hook prerouting priority dstnat; policy accept; meta nftrace set 1 ip saddr @bad_ip tcp dport { 80, 443 } redirect to :8080 } } table filter { chain prerouting {type filter hook prerouting priority -150;} chain input {type filter hook input priority 0; policy drop;} chain output {type filter...

...OS: other Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: tad1073 at gmail.com code snippet table inet nat { chain prerouting { type nat hook prerouting priority dstnat; policy accept; fib saddr . iif oif 0 counter drop fib saddr . iif oif "lo" counter accept fib saddr . iif oif "$inet_if" counter accept fib daddr . iif type { local, broadcast, multicast } counter accept ip daddr 10.0.0.11 tcp dport 80 dn...

...hain forward { type filter hook forward priority filter; policy accept; } chain output { type filter hook output priority filter; policy accept; } } table inet nat { chain prerouting { type nat hook prerouting priority dstnat; policy accept; tcp dport 2222 counter packets 1 bytes 60 tcp dport 22 counter packets 0 bytes 0 tcp dport 2222 redirect to :22 } } -- You are receiving this mail because: You are watching all bug changes. -------------- next part ----------...