#!/bin/bash # NFT_TEST_REQUIRES(NFT_TEST_HAVE_pipapo) set -e RULESET="table ip test3 { chain y { oif lo accept ip saddr 1.1.1.1 tcp sport 1024-65535 snat to 3.3.3.3 ip saddr 2.2.2.2 tcp sport 1024-65535 snat to 4.4.4.4 oifname enp2s0 snat ip to ip saddr map { 10.1.1.0/24 : 72.2.3.66-72.2.3.78 } tcp dport 8888 redirect tcp dport 9999 redirect } }" $NFT -o -f - <<< $RULESET