#970672 nftables dnat port range

Package:
nftables
Source:
nftables
Description:
Program to control packet filtering rules by Netfilter project
Submitter:
Igor M
Date:
2021-02-12 10:09:03 UTC
Severity:
normal
Tags:
#970672#5
Date:
2020-09-21 08:40:59 UTC
From:
To:
Hello guys. I have a problem with dnat of port range. When I try to dnat:

ip daddr $ext_ip tcp dport 55900-55910 dnat to $target_lan_host:5900-5910
persistent

I want to dnat 55900 to 5900, 55901 to 5901...55910 to 5910.
But all range 55900-55910 was redirected into first single port 5900

If i try :

ip daddr $ext_ip tcp dport 5900-5910 dnat to $target_lan_host:5900-5910
persistent

its work well, all port was redirected properly


I'm using Debian: 4.19.0-10-amd64 #1 SMP Debian 4.19.132-1 (2020-07-24)
x86_64 GNU/Linux

Best regards, Igor
#970672#10
Date:
2020-09-21 09:03:32 UTC
From:
To:
Please try a newer release of the nftables package.

regards.
#970672#15
Date:
2020-09-21 09:12:34 UTC
From:
To:
apt search -t testing nftables
...
nftables/testing,unstable 0.9.6-1 amd64 [upgradable from: 0.9.0-2]

did you mean this version?

пн, 21 вер. 2020 о 12:03 Arturo Borrero Gonzalez <arturo@debian.org> пише:
#970672#20
Date:
2020-09-21 10:19:58 UTC
From:
To:
Yes, or even better:

 buster-backports: 0.9.6-1~bpo10+1
#970672#25
Date:
2020-09-21 16:00:34 UTC
From:
To:
Done:

+++-==============-===============-============-==============================================================
ii  nftables       0.9.6-1~bpo10+1 amd64        Program to control packet
filtering rules by Netfilter project

But problem still exist

пн, 21 вер. 2020 о 13:20 Arturo Borrero Gonzalez <arturo@debian.org> пише:
#970672#30
Date:
2020-10-02 07:09:34 UTC
From:
To:
Hello. Excuse my persistence, but the update didn't fix the problem. Maybe
you have any other ideas?

пн, 21 вер. 2020 о 19:00 Igor M <eyegor.m@gmail.com> пише:
#970672#35
Date:
2021-02-12 10:05:54 UTC
From:
To: