[Bug 763] New: dnat and snat not changing port numbers on sctp packets

bugzilla-daemon at bugzilla.netfilter.org bugzilla-daemon at bugzilla.netfilter.org
Mon Dec 5 21:49:38 CET 2011


http://bugzilla.netfilter.org/show_bug.cgi?id=763

           Summary: dnat and snat not changing port numbers on sctp packets
           Product: netfilter/iptables
           Version: linux-2.6.x
          Platform: x86_64
        OS/Version: RedHat Linux
            Status: NEW
          Severity: normal
          Priority: P3
         Component: NAT
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: nbollinger at gmail.com
   Estimated Hours: 0.0


Looking at this patch, dnat and snat were changed to modify sctp packets

"Add SCTP/DCCP support to NAT targets"
http://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commit;h=5a942f9501f7ce287e1c37c553eb02a1e269e081

While dnat and snat do change the destination/source ips, its not changing the
port numbers when specified. Is it possible to fix this so that ports can also
be modified?

I'm using iptables v1.4.12.1 with centos 6 kernel 2.6.32-71.29.1.el6.x86_64

This is an example of how I'm trying to use it to forward a sctp port:

iptables -t nat -A PREROUTING  -p sctp -s 1.1.1.1 -d 2.2.2.2 --dport 9901 -j
DNAT --to-destination 3.3.3.3:9900

iptables -t nat -A POSTROUTING -p sctp -s 2.2.2.2 -d 3.3.3.3 --dport 9900 -j
SNAT --to-source 2.2.2.2:9901


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.



More information about the netfilter-buglog mailing list