Jeltz
64772b76e4
This is a fully static version of the config, and it is meant to be temporary (until I figure out a way to properly configure nftables using ansible…).
21 lines
360 B
Django/Jinja
21 lines
360 B
Django/Jinja
{{ ansible_managed | comment }}
|
|
|
|
table ip nat {
|
|
|
|
# chain prerouting {
|
|
# type nat hook prerouting dstnat
|
|
# polict accept
|
|
# }
|
|
|
|
# chain postrouting {
|
|
# type nat hook postrouting priority srcnat
|
|
# policy accept
|
|
#
|
|
# iif lo return
|
|
#
|
|
# meta pkttype unicast \
|
|
# ip saddr $nat_v4 ip daddr != $saclay_v4 \
|
|
# snat $snat_any_v4 persistent
|
|
# }
|
|
|
|
}
|