Differences

This shows you the differences between two versions of the page.

--- сервис_nat [2024/04/23 13:15]
val [nftables]
+++ сервис_nat [2024/04/23 13:57]
val [nftables]
@@ Line 74: / Line 74: @@
 gate# nft add table nat
-gate# nft add rule nat postrouting ip saddr 192.168.X.0/24 oif eth1 snat to 172.16.1.254
+gate# nft 'add chain nat postrouting { type nat hook postrouting priority 100 ; }'
+gate# nft add rule nat postrouting ip saddr 192.168.X.0/24 oif eth1 snat to 172.16.1.X
+gate# nft add rule nat postrouting ip saddr 192.168.100+X.0/24 oif eth1 snat to 172.16.1.X
 gate# nft list ruleset
-gate# file /etc/nftables.conf
+gate# nft flush ruleset
+gate# systemctl enable nftables.service --now
-gate# systemctl enable nftables.service
+gate# cat /etc/nftables.conf
+</code><code>
+...
+table ip nat {
+        chain postrouting {
+                type nat hook postrouting priority srcnat; policy accept;
+                ip saddr 192.168.100+X.0/24 oif "eth1" snat to 172.16.1.X
+        }
+}
+</code><code>
+gate# systemctl reload nftables.service
 </code>

Методические материалы Лохтурова Вячеслава