Afternoon
I'm hoping someone can point me in the direction of a fix for my current nftables config.
From the command line I can run the following:
sudo nft add
table nat
sudo nft add
chain nat post { type nat hook postrouting priority 0 \; \}
sudo nft add
chain nat pre { type nat hook prerouting priority 0 \; \}
sudo nft add
rule nat post ip saddr 10.10.10.0/24 oifname "eth0" masquerade
Listing my running nft rules shows this appended to the end:
table ip nat {
chain post {
type nat hook postrouting priority 0; policy
accept;
ip saddr 10.10.10.0/24 oifname "eth0" masquerade
}
chain pre {
type nat hook prerouting priority 0; policy
accept;
}
I then try to transfer that config to my nftables.conf but on
reading in the .conf file I get the errors:
sudo nft -f /etc/nftables.conf
/etc/nftables.conf:67:1-5: Error: syntax error,
unexpected table
table ip nat {
^^^^^
/etc/nftables.conf:70:55-64: Error: NAT is only
supported for IPv4/IPv6
ip saddr 10.10.10.0/24 oifname "eth0" masquerade
I'm obviously missing some piece of information here that will allow me to fix it.
If you'd like to help me add the masquerade for IPv6 as well that would be brilliant.
Hopefully someone has the answer as I currently stumped
Cheers
Steve