xref: /aosp_15_r20/external/iptables/extensions/libxt_DNAT.man (revision a71a954618bbadd4a345637e5edcf36eec826889)
1*a71a9546SAutomerger Merge WorkerThis target is only valid in the
2*a71a9546SAutomerger Merge Worker.B nat
3*a71a9546SAutomerger Merge Workertable, in the
4*a71a9546SAutomerger Merge Worker.B PREROUTING
5*a71a9546SAutomerger Merge Workerand
6*a71a9546SAutomerger Merge Worker.B OUTPUT
7*a71a9546SAutomerger Merge Workerchains, and user-defined chains which are only called from those
8*a71a9546SAutomerger Merge Workerchains.  It specifies that the destination address of the packet
9*a71a9546SAutomerger Merge Workershould be modified (and all future packets in this connection will
10*a71a9546SAutomerger Merge Workeralso be mangled), and rules should cease being examined.  It takes the
11*a71a9546SAutomerger Merge Workerfollowing options:
12*a71a9546SAutomerger Merge Worker.TP
13*a71a9546SAutomerger Merge Worker\fB\-\-to\-destination\fP [\fIipaddr\fP[\fB\-\fP\fIipaddr\fP]][\fB:\fP\fIport\fP[\fB\-\fP\fIport\fP[\fB/\fIbaseport\fP]]]
14*a71a9546SAutomerger Merge Workerwhich can specify a single new destination IP address, an inclusive
15*a71a9546SAutomerger Merge Workerrange of IP addresses. Optionally a port range,
16*a71a9546SAutomerger Merge Workerif the rule also specifies one of the following protocols:
17*a71a9546SAutomerger Merge Worker\fBtcp\fP, \fBudp\fP, \fBdccp\fP or \fBsctp\fP.
18*a71a9546SAutomerger Merge WorkerIf no port range is specified, then the destination port will never be
19*a71a9546SAutomerger Merge Workermodified. If no IP address is specified then only the destination port
20*a71a9546SAutomerger Merge Workerwill be modified.
21*a71a9546SAutomerger Merge WorkerIf \fBbaseport\fP is given, the difference of the original destination port and
22*a71a9546SAutomerger Merge Workerits value is used as offset into the mapping port range. This allows to create
23*a71a9546SAutomerger Merge Workershifted portmap ranges and is available since kernel version 4.18.
24*a71a9546SAutomerger Merge WorkerFor a single port or \fIbaseport\fP, a service name as listed in
25*a71a9546SAutomerger Merge Worker\fB/etc/services\fP may be used.
26*a71a9546SAutomerger Merge Worker.TP
27*a71a9546SAutomerger Merge Worker\fB\-\-random\fP
28*a71a9546SAutomerger Merge WorkerRandomize source port mapping (kernel >= 2.6.22).
29*a71a9546SAutomerger Merge Worker.TP
30*a71a9546SAutomerger Merge Worker\fB\-\-persistent\fP
31*a71a9546SAutomerger Merge WorkerGives a client the same source-/destination-address for each connection.
32*a71a9546SAutomerger Merge WorkerThis supersedes the SAME target. Support for persistent mappings is available
33*a71a9546SAutomerger Merge Workerfrom 2.6.29-rc2.
34*a71a9546SAutomerger Merge Worker.TP
35*a71a9546SAutomerger Merge WorkerIPv6 support available since Linux kernels >= 3.7.
36