Le 05/08/2017 à 08:03, david...@freevolt.org a écrit :
On Fri, 4 Aug 2017, jakob notland wrote:

Hello dear Debian support

This is not the Debian support. This is a user mailing list.

iptables -t nat -A PREROUTING -i eth0 -d $external_ip -m conntrack --ctstate NEW -j DNAT --to-destination iptables -t nat -A PREROUTING -i lxc-nat-bridge -d $external_ip -m conntrack --ctstate NEW -j DNAT --to-destination iptables -t nat -A OUTPUT -d $external_ip -m conntrack --ctstate NEW -j DNAT --to-destination

All the commands returns "Bad argument `conntrack'",

Is the variable $external_ip defined?

And does it contain a proper value ?

By the way, "-m conntrack --ctstate NEW" is totally useless in NAT rules and can be removed. The "nat" chains see only packets in the state NEW, so no need to check.

Reply via email to