Re: map problem with port range

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Le 01/11/2023 à 09:32, Pablo Neira Ayuso a écrit :
On Tue, Oct 31, 2023 at 07:38:30PM +0100, Daniel wrote:
Hi list

nft 1.02 I have following map configuration:

map forward_udp.lan {
     type ipv6_addr . inet_service : interval ipv6_addr . inet_service
     flags interval
     elements = { 2001:db8::1 . 20000-24999 : 2001:db8:16e:10::ffee .
20000-24999 }
}

ip6 chain prerouting

add rule ip6 nat prerouting ip6 daddr . udp dport map @forward_udp.lan
What is your intention with this rule?

Are you looking up for a matching packet in this map using

         ip6 daddr . udp dport

as key?
Yes. dport 20000-24999 to 2001:db8::1 should be forwarded du same port range at 2001:db8:16e:10::ffee

--
Daniel



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux