NAT rules failing with kernel 5.2

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello

I have some NAT rules which worked fine till yesterday.

But those rules started failing after I upgraded to Linux Kernel 5.2 (Arch Linux)

Trimmed down version of rules are as follows:

# cat /etc/nft.conf
define localifaces = { "eth0" }
define http_redirect_port = 3128
flush ruleset
add table ip nat
add chain ip nat prerouting { type nat hook prerouting priority 0; }
add rule ip nat prerouting tcp dport 80 iifname $localifaces redirect to $http_redirect_port

# nft -f /etc/nft.conf
nft1.conf:6:1-93: Error: Could not process rule: No such file or directory
add rule ip nat prerouting tcp dport 80 iifname $localifaces redirect to $http_redirect_port
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Same rules work perfectly on Linux 4.19.57 and 5.1.16

# nft list table ip nat
table ip nat {
        chain prerouting {
                type nat hook prerouting priority filter; policy accept;
                tcp dport 80 iifname { "eth0" } redirect to :3128
        }
}


Am I doing something wrong? Or something changed in kernel 5.2?

Please check and guide,

Thank you

Amish




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux