iptables, nft: add masquerade example (#6979)

2021-11-05 00:36:44 +01:00
parent a51f7f6ce1
commit 15c9047cb8
2 changed files with 8 additions and 0 deletions
--- a/pages/linux/nft.md
+++ b/pages/linux/nft.md
@@ -20,6 +20,10 @@

 `sudo nft add rule {{inet}} {{filter}} {{input}} {{tcp}} {{dport \{ telnet, ssh, http, https \} accept}}`

+- Add a NAT rule to translate all traffic from the `192.168.0.0/24` subnet to the host's public IP:
+
+`sudo nft add rule {{nat}} {{postrouting}} ip saddr {{192.168.0.0/24}} {{masquerade}}`
+
 - Show rule handles:

 `sudo nft --handle --numeric list chain {{family}} {{table}} {{chain}}`