diff options
| author | Łukasz Stelmach <l.stelmach@samsung.com> | 2025-08-21 12:39:18 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2025-08-21 16:21:05 +0200 |
| commit | 102e9607c63266c7f3413f8dcae51d9476e396e4 (patch) | |
| tree | 1fc9fe4ebc95b13caa002973846790d538f84749 | |
| parent | 8cb0c13b7777e72ca6f4265845dc99eff7cdf679 (diff) | |
extensions: man: Add a note about route_localnet sysctl
See ip_route_input_slow() in net/ipv4/route.c in the Linux
kernel sources.
Signed-off-by: Łukasz Stelmach <l.stelmach@samsung.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
| -rw-r--r-- | extensions/libxt_DNAT.man | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/extensions/libxt_DNAT.man b/extensions/libxt_DNAT.man index 090ecb42..cbfa5478 100644 --- a/extensions/libxt_DNAT.man +++ b/extensions/libxt_DNAT.man @@ -23,6 +23,10 @@ its value is used as offset into the mapping port range. This allows one to crea shifted portmap ranges and is available since kernel version 4.18. For a single port or \fIbaseport\fP, a service name as listed in \fB/etc/services\fP may be used. +If \fIipaddr\fP is an IPv4 loopback address (i.e. 127.0.0.0/8) the +"net.ipv4.conf.*.route_localnet" sysctl for the input interface needs +to be set to 1. Otherwise packets will be dropped by the routing code +as "martians". .TP \fB\-\-random\fP Randomize source port mapping (kernel >= 2.6.22). |