On Fri, Nov 07, 2014 at 12:39:35PM +0100, Arturo Borrero Gonzalez wrote: > This patch changes the parser to permit both nat_flags and port specification > in the redirect expression. > > The resulting syntax is: > % nft add rule nat prerouting redirect [port] [nat_flags] > > The port specification requires a bit of context regardin the transport > protocol. Some examples: > % nft add rule nat prerouting tcp dport 22 redirect :23 > % nft add rule add prerouting udp dport 53 redirect :5353 > > The nat_flags argument is the last argument: > % nft add rule nat prerouting tdp dport 80 redirect :8080 random > > The port specification can be a range: > % nft add rule nat prerouting tcp dport 80 redirect :8080-8090 random > > While at it, the regression tests files are updated. Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
