infra/ansible-role-firewall
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added support for nat

Browse source
This commit is contained in:
nd 2020-08-02 20:28:53 +02:00
parent 71c3dccba9
commit ce276d5b22
No known key found for this signature in database
GPG key ID: 21B5CD4DEE3670E9
2 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

14
templates/nftables.conf.j2
View file

@ -53,4 +53,18 @@ table inet filter {
}
}
table nat {
# NAT
chain prerouting {
type nat hook prerouting priority -100;
{{ nftchain('nat_prerouting') }}
}
chain postrouting {
type nat hook postrouting priority 100;
{{ nftchain('nat_postrouting') }}
}
}
include "/etc/nftables.d/*.nft"