[pkg-netfilter-team] Bug#970672: nftables dnat port range

Igor M eyegor.m at gmail.com
Mon Sep 21 09:40:59 BST 2020


Package: nftables
Version: 0.9.0-2

Hello guys. I have a problem with dnat of port range. When I try to dnat:

ip daddr $ext_ip tcp dport 55900-55910 dnat to $target_lan_host:5900-5910
persistent

I want to dnat 55900 to 5900, 55901 to 5901...55910 to 5910.
But all range 55900-55910 was redirected into first single port 5900

If i try :

ip daddr $ext_ip tcp dport 5900-5910 dnat to $target_lan_host:5900-5910
persistent

its work well, all port was redirected properly


I'm using Debian: 4.19.0-10-amd64 #1 SMP Debian 4.19.132-1 (2020-07-24)
x86_64 GNU/Linux

Best regards, Igor
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-netfilter-team/attachments/20200921/8dd3ad7c/attachment.html>


More information about the pkg-netfilter-team mailing list