Kamil Jońca <kjonca@xxxxx> wrote: > > Maybe I miss something obvious in documentation. > How stable is "masquerade" > I know that it translates addresses. > But what about ports? Changes them somehow? Keepos original? Depends. Default behaviour is to change the port if keeping it the same would result in a conflicting mapping. See MASQUERADE --random in iptables-extensions man page or random flag in nft man page.