[Bug 1051] nftables DNAT not working

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Thu May 26 14:01:23 CEST 2016


https://bugzilla.netfilter.org/show_bug.cgi?id=1051

--- Comment #5 from Andrey <andrey.aleksandrovich at googlemail.com> ---
Another sample - same issue.
I have the application listening on port 65525, but announces that it listens
on 80.
If I do this:
# nft add rule nat prerouting ip daddr 1.2.3.4 tcp dport 80 redirect to 65525
the application returns me that 1.2.3.4:80 is not reachable from outside
(application log entry, that reports response from remote host). Same, if there
will be 443 instead of 80.
While the rule for DNS redirect (for internal networks):
# nft add rule nat prerouting ip daddr 192.168.0.1 udp dport 53 dnat 8.8.8.8:53
is working well.

So, that's it.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160526/00e41036/attachment.html>


More information about the netfilter-buglog mailing list