Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
table ip filter {
chain input {
type filter hook input priority 0; policy accept;
}
chain output {
type filter hook output priority 0; policy accept;
}
chain forward {
type filter hook forward priority 0; policy accept;
}
}
table ip nat {
chain prerouting {
type nat hook prerouting priority 0; policy accept;
counter packets 780376 bytes 46823635 comment "count accepted packets" # handle 5
}
chain input {
type nat hook input priority 0; policy accept;
counter packets 42 bytes 3307 comment "count accepted packets" # handle 6
}
chain output {
type nat hook output priority 0; policy accept;
counter packets 13 bytes 1070 comment "count accepted packets" # handle 7
}
chain postrouting {
type nat hook postrouting priority 100; policy accept;
ip saddr 10.0.0.0/16 oif "eth0" masquerade # handle 8
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment