From dc8a5fbc595b03ebafbe3c6f035a2a8935eb47c2 Mon Sep 17 00:00:00 2001 From: Chion Tang Date: Sun, 21 Jan 2018 03:20:12 +0800 Subject: [PATCH] Update README.md --- README.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 2da14e2..24d9325 100644 --- a/README.md +++ b/README.md @@ -1,11 +1,12 @@ -Implementation of full cone SNAT. Currently only UDP is supported and actions for other protos are like MASQUERADE. +Implementation of full cone SNAT. -Assume eth0 is external interface: +Assuming eth0 is external interface: ``` iptables -t nat -A POSTROUTING -o eth0 -j FULLCONENAT #same as MASQUERADE -iptables -t nat -A PREROUTING -i eth0 -j FULLCONENAT +iptables -t nat -A PREROUTING -i eth0 -j FULLCONENAT #automatically restore NAT for inbound packets ``` +Currently only UDP traffic is supported for full-cone NAT. For other protos FULLCONENAT is equivalent to MASQUERADE. Build ====== @@ -74,12 +75,12 @@ IPtables extension Usage ===== -Assume eth0 is external interface: +Assuming eth0 is external interface: Basic Usage: ``` -iptables -t nat -A POSTROUTING -o eth0 -j FULLCONENAT #same as MASQUERADE +iptables -t nat -A POSTROUTING -o eth0 -j FULLCONENAT iptables -t nat -A PREROUTING -i eth0 -j FULLCONENAT ```