Re: Iptables-nftables transition: DNAT on Output

[Imran Geriskovan <imran.geriskovan@xxxxxxxxx>]

On 8/2/16, Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx> wrote:
> perhaps the error is your base chain: seems to be of type filter.

Thanks for the comment..
Following does the trick:

chain outnat {
  type nat hook output priority 0;
  skuid imran tcp dport XX dnat 127.0.0.1:YY
}

chain postnat {
   type nat hook postrouting priority 100;
}
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html