Re: nft rule to redirect multiple ports using maps

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 9 Oct 2015 12:56:21 +0200
Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote:

> On Thu, Oct 08, 2015 at 10:12:30PM +0200, Giorgio wrote:

> > <cmdline>:1:37-74: Error: transport protocol mapping is only valid after
> > transport protocol match

> That is telling that protocol context is missing, try with this:
> 
>  nft add rule nat prerouting ip protocol tcp \
>         redirect to tcp dport map { 22 : 2222, 23 : 2323 }

The words, while technically correct, probably should convey more information. Perhaps something like:

"... Error: You must specify a transport protocol (TCP/UDP/etc.) before you can map it"

Neal
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux