[Bug 763] New: dnat and snat not changing port numbers on sctp packets

bugzilla-daemon at bugzilla.netfilter.org bugzilla-daemon at bugzilla.netfilter.org
Mon Dec 5 21:49:38 CET 2011


           Summary: dnat and snat not changing port numbers on sctp packets
           Product: netfilter/iptables
           Version: linux-2.6.x
          Platform: x86_64
        OS/Version: RedHat Linux
            Status: NEW
          Severity: normal
          Priority: P3
         Component: NAT
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: nbollinger at gmail.com
   Estimated Hours: 0.0

Looking at this patch, dnat and snat were changed to modify sctp packets

"Add SCTP/DCCP support to NAT targets"

While dnat and snat do change the destination/source ips, its not changing the
port numbers when specified. Is it possible to fix this so that ports can also
be modified?

I'm using iptables v1.4.12.1 with centos 6 kernel 2.6.32-71.29.1.el6.x86_64

This is an example of how I'm trying to use it to forward a sctp port:

iptables -t nat -A PREROUTING  -p sctp -s -d --dport 9901 -j
DNAT --to-destination

iptables -t nat -A POSTROUTING -p sctp -s -d --dport 9900 -j
SNAT --to-source

Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

More information about the netfilter-buglog mailing list