Le 05/08/2017 à 08:03, davidson@freevolt.org a écrit :
On Fri, 4 Aug 2017, jakob notland wrote:Hello dear Debian support
This is not the Debian support. This is a user mailing list.
iptables -t nat -A PREROUTING -i eth0 -d $external_ip -m conntrack --ctstate NEW -j DNAT --to-destination 10.3.0.2 iptables -t nat -A PREROUTING -i lxc-nat-bridge -d $external_ip -m conntrack --ctstate NEW -j DNAT --to-destination 10.3.0.2 iptables -t nat -A OUTPUT -d $external_ip -m conntrack --ctstate NEW -j DNAT --to-destination 10.3.0.2All the commands returns "Bad argument `conntrack'",Is the variable $external_ip defined?
And does it contain a proper value ?By the way, "-m conntrack --ctstate NEW" is totally useless in NAT rules and can be removed. The "nat" chains see only packets in the state NEW, so no need to check.