mirrors/netfilter-full-cone-nat
1
0
Fork 0
mirror of https://github.com/llccd/netfilter-full-cone-nat synced 2024-11-21 15:25:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Chion Tang 2018-01-21 03:20:12 +08:00 committed by GitHub
parent 671a13cff8
commit dc8a5fbc59
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
README.md
View File

@ -1,11 +1,12 @@
Implementation of full cone SNAT. Currently only UDP is supported and actions for other protos are like MASQUERADE.
Implementation of full cone SNAT.
Assume eth0 is external interface:
Assuming eth0 is external interface:
```
iptables -t nat -A POSTROUTING -o eth0 -j FULLCONENAT #same as MASQUERADE
iptables -t nat -A PREROUTING -i eth0 -j FULLCONENAT
iptables -t nat -A PREROUTING -i eth0 -j FULLCONENAT #automatically restore NAT for inbound packets
```
Currently only UDP traffic is supported for full-cone NAT. For other protos FULLCONENAT is equivalent to MASQUERADE.
Build
======
@ -74,12 +75,12 @@ IPtables extension
Usage
=====
Assume eth0 is external interface:
Assuming eth0 is external interface:
Basic Usage:
```
iptables -t nat -A POSTROUTING -o eth0 -j FULLCONENAT #same as MASQUERADE
iptables -t nat -A POSTROUTING -o eth0 -j FULLCONENAT
iptables -t nat -A PREROUTING -i eth0 -j FULLCONENAT
```