Re: [nft 0.9.3 | kernel 5.4.48] cannot get NAT to work

[ѽ҉ᶬḳ℠ <vtol@xxxxxxx>]

On 25/06/2020 07:13, ѽ҉ᶬḳ℠ wrote:
> On 25/06/2020 01:45, Duncan Roe wrote:
> > On Wed, Jun 24, 2020 at 08:59:00AM +0000, ????????????? wrote:
> > > On 24/06/2020 08:53, Florian Westphal wrote:
> > > > ????????????? <vtol@xxxxxxx> wrote:
> > > > > Getting somewhere now, unless there are different kconf flags in 
> > > > > 5.6 for
> > > > > building that module, least on this node with 5.4:
> > > > >
> > > > > modinfo: ERROR: Module alias nft_chain_nat not found.
> > > > >
> > > > > Which kconf flag is supposed to generate that particular module? 
> > > > > Looked into
> > > > > https://github.com/torvalds/linux/blob/v5.4/net/netfilter/Kconfig 
> > > > > but could
> > > > > not find something specific that builds that module.
> > > > https://github.com/torvalds/linux/blob/v5.4/net/netfilter/Makefile
> > > >
> > > > -> CONFIG_NFT_NAT
> > > >
> > > > ... which you seem to have enabled already.
> > > > So I would guess that the build system used doesn't pick the module up
> > > > for some reason.
> > > Thank you for the assistance. Will take it up with the distro 
> > > maintainers to
> > > take a look at their build system.
> > What is your distro BTW?
>
> OpenWrt, whilst revolving around routers it is not NFT centric.
>
> > In the meantime, maybe a depmod would help, if you haven't already 
> > tried that.
> >
> > Cheers ... Duncan.
>
> Does not work with the distro as it does not provide the necessary 
> directories /lib/modules/$(uname -r)/modules.order and 
> /lib/modules/$(uname -r)/modules.builtin

Alternatively there is - oddly none exhibiting a dependency on 
nft_chain_nat:

ls /lib/modules/$(uname -r) | grep nat
iptable_nat.ko
nf_nat.ko
nf_nat_amanda.ko
nf_nat_ftp.ko
nf_nat_h323.ko
nf_nat_irc.ko
nf_nat_pptp.ko
nf_nat_sip.ko
nf_nat_snmp_basic.ko
nf_nat_tftp.ko
nft_nat.ko
xt_nat.ko

modprobe -D nf_nat
insmod /lib/modules/5.4.48/nf_defrag_ipv4.ko
insmod /lib/modules/5.4.48/nf_defrag_ipv6.ko
insmod /lib/modules/5.4.48/nf_conntrack.ko
insmod /lib/modules/5.4.48/nf_nat.ko

modprobe -D nft_nat
insmod /lib/modules/5.4.48/nf_defrag_ipv4.ko
insmod /lib/modules/5.4.48/nf_defrag_ipv6.ko
insmod /lib/modules/5.4.48/nf_conntrack.ko
insmod /lib/modules/5.4.48/nf_nat.ko
insmod /lib/modules/5.4.48/nfnetlink.ko
insmod /lib/modules/5.4.48/nf_tables.ko
insmod /lib/modules/5.4.48/nft_nat.ko

Attachment: OpenPGP_0xF4F735931F05C5CE.asc
Description: application/pgp-keys

Attachment: OpenPGP_signature
Description: OpenPGP digital signature