nftables dnat forwarding is not working properly [closed]
Good day,
I am currently migrating from iptables to nftables. The problem is my systemd containers are running behind NAT, but I want to forward ports like 443 or 80 to them. There is no error message when I use the following set of commands, but neither do I get to my web server when I use nftables.
Many thanks in advance.
With best regards, Felix
EDIT.: The problem was solved by the helpful comments. Thank you!
Here are some steps you can take:
- Type nat hook prerouting priority 0; <-Should be -100 (minus hundred) according to NF_IP_PRI_NAT_DST netfilter constant
- Use "meta nftrace set 1" in prerouting and "nft monitor" for debug you packet flow
- Simplest ruleset to isolate problem and make example
I also have not working dnat. From one iface all OK but from other not.
Packets enter prerouting, dnat accepted But nothing happens after this. "Conntrac -E" does not see these packages.