]> git.ipfire.org Git - thirdparty/nftables.git/commit
rule: allow src/dstnat prios in input and output
authorFlorian Westphal <fw@strlen.de>
Fri, 28 Jul 2023 17:43:16 +0000 (19:43 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 1 Sep 2025 20:36:32 +0000 (22:36 +0200)
commit0a0ea53f036841e3830d96a2ff71eb7aa9edb5b0
tree4e3dfb46a36608fed2032fc5d356365884c29273
parent68d8bad9724aaddfc25d72e29359040a21ba93bb
rule: allow src/dstnat prios in input and output

commit 8beafab74c391130fbb9111bfccab8613644e3b9 upstream.

Dan Winship says:

The "dnat" command is usable from either "prerouting" or "output", but the
"dstnat" priority is only usable from "prerouting". (Likewise, "snat" is usable
from either "postrouting" or "input", but "srcnat" is only usable from
"postrouting".)

No need to restrict those priorities to pre/postrouting.

Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1694
Signed-off-by: Florian Westphal <fw@strlen.de>
src/rule.c