blob: 8cecd8e9bdd88582fb7fc56876b1a77888d7dbac (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
# create dummy
-I -s 2001:DB8::1.1.1.1 -d 2001:DB8::2.2.2.2 --dst-nat 2001:DB8::3.3.3.3 -p tcp --sport 10 --dport 20 --state LISTEN -u SEEN_REPLY -t 50 ; OK
# show
-L --dst-nat ; OK
# show
-L --dst-nat 2001:DB8::3.3.3.3 ; OK
# show
-L --src-nat ; OK
# delete
-D -s 2001:DB8::1.1.1.1 ; OK
# create dummy again
-I -s 2001:DB8::1.1.1.1 -d 2001:DB8::2.2.2.2 --src-nat 2001:DB8::3.3.3.3 -p tcp --sport 10 --dport 20 --state LISTEN -u SEEN_REPLY -t 50 ; OK
# show
-L --src-nat ; OK
# show
-L --src-nat 2001:DB8::3.3.3.3 ; OK
# show
-L --dst-nat ; OK
# show any-nat
-L --any-nat ; OK
# delete
-D -s 2001:DB8::1.1.1.1 ; OK
# bad combination
-L --dst-nat --any-nat ; BAD
# bad combination
-L --src-nat --any-nat ; BAD
# bad combination
-L --src-nat --dst-nat --any-nat ; BAD
# create
-I -s 2001:DB8::1.1.1.1 -d 2001:DB8::2.2.2.2 --dst-nat [2001:DB8::3.3.3.3]:80 -p tcp --sport 10 --dport 20 --state LISTEN -u SEEN_REPLY -t 50 ; OK
# show
-L --dst-nat [2001:DB8::3.3.3.3]:80 ; OK
# show
-L --any-nat [2001:DB8::3.3.3.3]:80 ; OK
# show
-L --dst-nat [2001:DB8::3.3.3.3]:81 ; OK
# show
-L --dst-nat [2001:DB8::1.1.1.1]:80 ; OK
# noport
-L --dst-nat [2001:DB8::1.1.1.1]: ; BAD
# badport
-L --dst-nat [2001:DB8::1.1.1.1]:: ; BAD
# badport
-L --dst-nat [2001:DB8::1.1.1.1]:80:80 ; BAD
# badport
-L --dst-nat [2001:DB8::1.1.1.1]:65536 ; BAD
# delete
-D -s 2001:DB8::1.1.1.1 ; OK
# mismatched address family
-I -s 2001:DB8::1.1.1.1 -d 2001:DB8::2.2.2.2 --dst-nat 3.3.3.3 -p tcp --sport 10 --dport 20 --state LISTEN -u SEEN_REPLY -t 50 ; BAD
# mismatched address family
-I -s 1.1.1.1 -d 2.2.2.2 --dst-nat 2001:DB8::3.3.3.3 -p tcp --sport 10 --dport 20 --state LISTEN -u SEEN_REPLY -t 50 ; BAD
# create - brackets only for ports in nat
-I -s 2001:DB8::1.1.1.1 -d 2001:DB8::2.2.2.2 --dst-nat [2001:DB8::3.3.3.3] -p tcp --sport 10 --dport 20 --state LISTEN -u SEEN_REPLY -t 50 ; BAD
# create - brackets rejected elsewhere
-I -s [2001:DB8::1.1.1.1] -d 2001:DB8::2.2.2.2 --dst-nat 2001:DB8::3.3.3.3 -p tcp --sport 10 --dport 20 --state LISTEN -u SEEN_REPLY -t 50 ; BAD
|
