nftables
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revision | |||
| nftables [2022/03/16 08:38] – external edit 127.0.0.1 | nftables [2026/03/22 12:28] (current) – ww | ||
|---|---|---|---|
| Line 118: | Line 118: | ||
| } | } | ||
| + | </ | ||
| + | |||
| + | ---- | ||
| + | |||
| + | ===== The Masquerade ===== | ||
| + | |||
| + | < | ||
| + | table ip nat { | ||
| + | chain postrouting { | ||
| + | type nat hook postrouting priority 100; | ||
| + | oif $iface_wan masquerade; | ||
| + | } | ||
| + | } | ||
| </ | </ | ||
| Line 123: | Line 136: | ||
| ===== The NAT ===== | ===== The NAT ===== | ||
| + | |||
| + | < | ||
| + | table inet filter { | ||
| + | chain forward { | ||
| + | type filter hook forward priority 0; | ||
| + | policy drop; | ||
| + | |||
| + | jump global | ||
| + | |||
| + | # [...] | ||
| + | |||
| + | ip daddr 192.168.1.10 tcp dport 3389 accept | ||
| + | |||
| + | counter drop | ||
| + | } | ||
| + | } | ||
| + | |||
| + | </ | ||
| < | < | ||
nftables.txt · Last modified: by ww