Differences

This shows you the differences between two versions of the page.

--- сервис_nat [2024/04/08 16:06]
val
+++ сервис_nat [2024/04/23 14:00] (current)
val [nftables]
@@ Line 67: / Line 67: @@
   * [[https://wiki.nftables.org/wiki-nftables/index.php/Performing_Network_Address_Translation_(NAT)|Performing Network Address Translation (NAT)]]
+  * https://wiki.debian.org/nftables
 <code>
-nft add rule nat postrouting ip saddr 192.168.22.0/24 oif eth1 snat to 10.5.7.122
+gate### apt install nftables
-nft list ruleset
+gate# man nft
+gate# nft add table nat
+gate# nft 'add chain nat postrouting { type nat hook postrouting priority srcnat ; }'
+gate# nft add rule nat postrouting ip saddr 192.168.X.0/24 oif eth1 snat to 172.16.1.X
+gate# nft add rule nat postrouting ip saddr 192.168.100+X.0/24 oif eth1 snat to 172.16.1.X
+gate# nft list ruleset
+gate# nft flush ruleset
+gate# systemctl enable nftables.service --now
+gate# cat /etc/nftables.conf
+</code><code>
+...
+table ip nat {
+        chain postrouting {
+                type nat hook postrouting priority srcnat; policy accept;
+                ip saddr 192.168.100+X.0/24 oif "eth1" snat to 172.16.1.X
+        }
+}
+</code><code>
+gate# systemctl reload nftables.service
 </code>

Методические материалы Лохтурова Вячеслава