<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - nftables DNAT not working"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1051#c5">Comment # 5</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - nftables DNAT not working"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1051">bug 1051</a>
from <span class="vcard"><a class="email" href="mailto:andrey.aleksandrovich@googlemail.com" title="Andrey <andrey.aleksandrovich@googlemail.com>"> <span class="fn">Andrey</span></a>
</span></b>
<pre>Another sample - same issue.
I have the application listening on port 65525, but announces that it listens
on 80.
If I do this:
# nft add rule nat prerouting ip daddr 1.2.3.4 tcp dport 80 redirect to 65525
the application returns me that 1.2.3.4:80 is not reachable from outside
(application log entry, that reports response from remote host). Same, if there
will be 443 instead of 80.
While the rule for DNS redirect (for internal networks):
# nft add rule nat prerouting ip daddr 192.168.0.1 udp dport 53 dnat 8.8.8.8:53
is working well.
So, that's it.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>