On 03/12/2013 07:11 AM, Florian Westphal wrote: > Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx> wrote: >> ip6tables -t nat -A OUTPUT -d fd00:0:0:3::/64 -j DNPT --src-pfx >> fd00:0:0:3::/64 --dst-pfx fd00:0:0:1::/64 > [..] > > This won't work, DNPT is stateless, the nat table is only consulted > for the first packet of a connection. > > Use mangle instead, this should also take care of possible new > route due to changed dst address. > Ah, thanks for your pointer. Everything seems to work correctly now :) Best regards, Matthias Schiffer
Attachment:
signature.asc
Description: OpenPGP digital signature
