<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - Table ipv4-nat prerouting dnat doesn't accept dest IP:PORT"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1117#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - Table ipv4-nat prerouting dnat doesn't accept dest IP:PORT"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1117">bug 1117</a>
from <span class="vcard"><a class="email" href="mailto:jan@purepeople.be" title="Jan <jan@purepeople.be>"> <span class="fn">Jan</span></a>
</span></b>
<pre>with kernel 4.4 (std ubuntu) and nftables 0.5
---------------
root@ctrl-ma-g8-1:~# nft add rule ip nat prerouting iif public tcp dport 9999
dnat 10.108.2.123:999
root@ctrl-ma-g8-1:~# nft list ruleset
table ip nat {
chain prerouting {
type nat hook prerouting priority -150; policy accept;
iif public tcp dport 9999 dnat 10.108.2.123:999
}
chain postrouting {
type nat hook postrouting priority -150; policy accept;
oif public ip saddr 10.108.2.0/24 masquerade
ip saddr 172.17.0.0/16 masquerade
}
}
----------------
things work....
IIRC on 4.8.11, things work too</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>