Re: [nft 0.9.3 | kernel 5.4.48] cannot get NAT to work

[Duncan Roe <duncan_roe@optusnet.com.au>]

On Thu, Jun 25, 2020 at 08:45:00AM +0000, ????????????? wrote:
> On 25/06/2020 07:13, ????????????? wrote:
[...]
> > 
> > OpenWrt, whilst revolving around routers it is not NFT centric.
> > 
[...]
> > 
> > Does not work with the distro as it does not provide the necessary
> > directories /lib/modules/$(uname -r)/modules.order and
> > /lib/modules/$(uname -r)/modules.builtin

That is odd. The 2 files are approx 130KB and 13KB and are always produced in a
kernel build.
> 
> Alternatively there is - oddly none exhibiting a dependency on
> nft_chain_nat:
> 
nft_chain_nat depends on nf_nat & nf_tables, not vice versa.
The kernel loads it in respone to the netlink message generated by
> nft 'add chain inet nat prerouting...

I can't reproduce what you see even with these revisions:

# nft --version
nftables v0.9.3 (Topsy)
# ls -1 /usr/lib64/libnftnl*
/usr/lib64/libnftnl.so
/usr/lib64/libnftnl.so.11
/usr/lib64/libnftnl.so.11.2.0
# uname -r
5.4.48

If you modprobe nft_chain_nat as part of the boot process, you should of course
be fine.
To explore the problem further, I would build a 5.4.48 kernel from kernel.org
source, using the .config you have. As long as you have a spare 6G disc space,
you gould git clone
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (6GB allows for a
build).

Cheers ... Duncan.