From: Mojtaba Esfandiari <Esfandiari@NasimTelecom.com>
To: netfilter-devel@vger.kernel.org
Subject: Issue related to conntrack while insert new rule with conntrack command in linux
Date: Thu, 25 Apr 2019 13:52:20 +0430 [thread overview]
Message-ID: <8a0187814d06d872011e4026dab073a0@NasimTelecom.com> (raw)
Hello,
I read conntrack document that you wrote about connection tracking. That
is great.
I have a issue while i am working on it. For example i just want add new
rule like this:
conntrack -I -p udp -s 192.168.122.242 -d 192.168.122.103 --sport 5070
--dport 5005 -r 192.168.122.1 -q 192.168.122.103 --reply-port-src 1111
--reply-port-dst 2222 --timeout 30
But it doen't work.
if i insert these two rule in iptable, the same above rule will insert
in conntrack table automatically and work correctly.
iptables -t nat -A PREROUTING -i eth0 -p udp -s 192.168.122.242 --dport
5005 -j DNAT --to 192.168.122.1:1111
iptables -t nat -A POSTROUTING -p udp --dport 1111 -j SNAT --to
192.168.122.103:2222
Who can i solve this problem?
With Best regards
next reply other threads:[~2019-04-25 10:13 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-04-25 9:22 Mojtaba Esfandiari [this message]
-- strict thread matches above, loose matches on Subject: below --
2019-04-25 14:59 Issue related to conntrack while insert new rule with conntrack command in linux Mojtaba
2019-04-25 15:08 ` Mojtaba
2019-04-25 22:45 ` Pablo Neira Ayuso
2019-04-26 10:22 ` Mojtaba
2019-04-26 19:23 ` Mojtaba
2019-04-26 19:37 ` Pablo Neira Ayuso
2019-04-26 19:50 ` Mojtaba
2019-04-27 9:01 ` Mojtaba
2019-04-27 9:43 ` Pablo Neira Ayuso
2019-04-27 11:30 ` Mojtaba
2019-04-28 6:29 ` Mojtaba
2019-04-28 8:02 ` Mojtaba
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=8a0187814d06d872011e4026dab073a0@NasimTelecom.com \
--to=esfandiari@nasimtelecom.com \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).