branch: externals/nftables-mode
commit 166b789260ea8c58c97e7905f97eb54107387994
Author: Trent W. Buck <trentb...@gmail.com>
Commit: Trent W. Buck <trentb...@gmail.com>
old comments
---
nftables-router.nft | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/nftables-router.nft b/nftables-router.nft
index 1ced5255b4..95725d612a 100644
--- a/nftables-router.nft
+++ b/nftables-router.nft
@@ -629,6 +629,10 @@ table inet my_filter {
# NOTE: dual-stack (IPv4/IPv6) NAT is annoying.
# IPv6 addresses are plentiful, so don't NAT IPv6.
#
+# NOTE: in linux 5.2+ you *CAN* do inet (combined IPv4/IPv6) nat chains.
+#
+# table inet x { chain y { type nat hook postrouting priority srcnat;
policy accept; } }
+#
# GOTCHA: apparently you MUST hook BOTH prerouting AND postrouting.
# If you only hook one, it won't work.
#
