[Bug 1105] masquerade fully broken when no prerouting chain is created

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Fri Aug 18 23:30:38 CEST 2017


--- Comment #2 from Fabian Franz <s1410239008 at students.fh-hagenberg.at> ---
First of all: If you look at the creation date, this ticket is older than the
change of the wiki entry.

An empty chain is something that should not exist in nftables in my opinion.
Doing NAT in only one direction, which breaks all TCP connections, is
definitely incorrect behaviour in any setup. So it has to NAT in both
directions or in none of them.

You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170818/bb201356/attachment.html>

More information about the netfilter-buglog mailing list