On 24 May 2017 at 11:30, Zheng konia <konianet@xxxxxxxxx> wrote: > Hi, I do have read your wiki. > > However, there's less example about DNAT --to-destination-port range. > You do have examples about to different destination, while I am > looking for the different destination-port balance. > > Any suggestion? > Try something like this: nft add rule t c ip protocol tcp dnat to 192.168.1.100 : numgen inc mod 2 map { 0 : 4040 , 1 : 4050 } (i.e, the destination address doesn't change, but port does) We can update the wiki if that works. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html