On 11 May 2017 at 09:44, Vladimir Kudrya <[email protected]> wrote: > Package: nftables > Version: 0.7-1 > Severity: normal > > Dear Maintainer, I'm trying to set simple dnat with nftables > The problem is: destination host is ignored: > When applying this construction: > > table ip main { > chain dstnat { > type nat hook prerouting priority -100; policy accept; > iifname "wan0" ip daddr 10.10.10.1 tcp dport 2210 dnat to > 172.17.18.1:22 # also tried with space before ":22" > } > } > > destination host is missing from result: > > table ip main { > chain dstnat { > type nat hook prerouting priority -100; policy accept; > iifname "wan0" ip daddr 10.10.10.1 tcp dport 2210 dnat to :22 > } > } > >
Hi Vladimir, thanks for the report. this is already fixed in upstream code [0]. Problem is only in the textual output. The engine works perfectly (i.e. does the nat as expected). The nftables upstream release v0.8 which is about to be released will include this fix. I don't think we have the chance for this fix to be included in stretch stable before our release. [0] http://git.netfilter.org/nftables/commit/?id=4ae0b6dc90d16b4d93a4e8b6703f23dcf2467b85
