<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED - STATELESS, rules with notrack into a map"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1410#c3">Comment # 3</a>
on <a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED - STATELESS, rules with notrack into a map"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1410">bug 1410</a>
from <span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span></b>
<pre>(In reply to e.lohmann from <a href="show_bug.cgi?id=1410#c2">comment #2</a>)
<span class="quote">> Hi Pablo,
>
> thanks for your answer. No, what I like to do in RAW is the same I do in NAT
> Pre/Post.
>
> dnat to ip daddr map { 1.1.1.1 : 2.2.2.2, 1.1.1.2 : 2.2.2.3 }
>
> This reads as follows: if packets send _to_ IP address 1.1.1.1, the rewrite
> destination address to 2.2.2.2 and so on.</span >
This rule represents the stateless dnat that you are asking for:
nft add rule raw PREROUTING ip daddr set ip saddr map { 1.1.1.1 : 2.2.2.2,
1.1.1.2 : 2.2.2.3 } notrack
This reads as: set IP destination address based on the map lookup.
This maps lookup takes packets sent to IP address 1.1.1.1 and it returns
2.2.2.2, which is used to rewrite the UP destionation.
<span class="quote">> snat to ip saddr map { 2.2.2.2 : 1.1.1.1, 2.2.2.3 : 1.1.1.2 }
>
> This reads as follows: if packets came _from_ IP address 2.2.2.2, the
> rewrite source address to 1.1.1.1 and so on.</span >
nft add rule raw PREROUTING ip saddr set ip saddr map { 1.1.1.1 : 2.2.2.2,
1.1.1.2 : 2.2.2.3 } notrack
Similar rule as above, but "ip saddr set" is used.
[...]
<span class="quote">> Right now there is no way to create a map in raw and do address rewrite.</span >
Did you give a try to the examples above?
Thank you.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>