Source IP address masquerade with nftables

Martin [PLCnext Technology Team]

I'm trying to set up nftables to masquerade source addresses on the AXC F 2152.

I am able to add the nat table, and also the postrouting chain, to the nft configuration. However I cannot get anything like the following command to work:

nft add rule nat postrouting masquerade

In all cases I've tried, I get the following:

Error: Could not process rule: No such file or directory

What am I doing wrong?

Vincent PLCnext Team

Hi Martin,

 

Just for reference to others, as you know the answer already

 

The current kernel doesn't include NFT_CHAIN_NAT_IPV4 (and 6) module, hence no NAT features are available at this moment. Hopefully it will be included somewhere in the coming releases.

 

vishal

Is it possible to do the internal NATing using IP tables?

dcrispino@phoenixcontact.com

It's possible suing NFT table. For refence example see here: https://www.plcnext-community.net/en/discussions-2-offcanvas/re-nftables-and-network-traffic-redirection-6.html#reply-4657