mirror of
https://github.com/nftables-rs/nftables-rs.git
synced 2026-10-19 08:01:24 +00:00
115 lines
2.2 KiB
JSON
115 lines
2.2 KiB
JSON
{
|
|
"nftables": [
|
|
{
|
|
"metainfo": {
|
|
"version": "1.0.9",
|
|
"release_name": "Old Doc Yak #3",
|
|
"json_schema_version": 1
|
|
}
|
|
},
|
|
{
|
|
"table": {
|
|
"family": "ip",
|
|
"name": "nat",
|
|
"handle": 1
|
|
}
|
|
},
|
|
{
|
|
"chain": {
|
|
"family": "ip",
|
|
"table": "nat",
|
|
"name": "prerouting",
|
|
"handle": 1,
|
|
"type": "nat",
|
|
"hook": "prerouting",
|
|
"prio": 0,
|
|
"policy": "accept"
|
|
}
|
|
},
|
|
{
|
|
"chain": {
|
|
"family": "ip",
|
|
"table": "nat",
|
|
"name": "postrouting",
|
|
"handle": 2,
|
|
"type": "nat",
|
|
"hook": "postrouting",
|
|
"prio": 100,
|
|
"policy": "accept"
|
|
}
|
|
},
|
|
{
|
|
"rule": {
|
|
"family": "ip",
|
|
"table": "nat",
|
|
"chain": "postrouting",
|
|
"handle": 3,
|
|
"expr": [
|
|
{
|
|
"match": {
|
|
"op": "==",
|
|
"left": {
|
|
"meta": {
|
|
"key": "l4proto"
|
|
}
|
|
},
|
|
"right": "tcp"
|
|
}
|
|
},
|
|
{
|
|
"match": {
|
|
"op": "!=",
|
|
"left": {
|
|
"payload": {
|
|
"protocol": "ip",
|
|
"field": "daddr"
|
|
}
|
|
},
|
|
"right": {
|
|
"prefix": {
|
|
"addr": "192.168.122.0",
|
|
"len": 24
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"masquerade": {
|
|
"port": {
|
|
"range": [
|
|
1024,
|
|
65535
|
|
]
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"rule": {
|
|
"family": "ip",
|
|
"table": "nat",
|
|
"chain": "postrouting",
|
|
"handle": 4,
|
|
"expr": [
|
|
{
|
|
"match": {
|
|
"op": "==",
|
|
"left": {
|
|
"meta": {
|
|
"key": "oifname"
|
|
}
|
|
},
|
|
"right": "wan0"
|
|
}
|
|
},
|
|
{
|
|
"masquerade": null
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|