nftables

noteId: 29B760789023481185B18C5FBB6AC239 · 原始路径：/ALL/世赛题目（练习） - 笔记/集训笔记/贵州-贵阳/A模块/nftables.note

apt install -y iptables nftablesiptables -t nat -A PREROUTING -s 1.1.1.1 -j DNAT --to 2.2.2.2iptables -t nat -A POSTROUTING -s 1.1.1.1 -j SNAT --to 2.2.2.2iptables -A INPUT -s 1.1.1.1 -j ACCEPTiptables -A OUTPUT -s 1.1.1.1 -j ACCEPTiptables -Fiptables -t nat -Fnft add ip nat POSTROUTING ip saddr 192.168.100.110 snat 213.110.3.10nft add ip nat POSTROUTING ip saddr 192.168.100.0/24 snat 213.110.3.1 nft add ip nat PREROUTING ip daddr 213.110.3.10 dnat 192.168.100.110 nft add ip filter INPUT ip saddr 192.168.100.0/24 acceptnft add ip filter INPUT ip saddr 192.168.103.0/24 acceptnft add ip filter INPUT ip saddr 172.16.10.0/24 acceptnft add ip filter INPUT ip saddr 172.31.10.0/24 acceptiptables -A INPUT -p icmp --icmp-type echo-reply -j ACCEPTnft add rule ip filter INPUT ip saddr 213.110.3.1 acceptnft add rule ip filter INPUT ip saddr 213.110.3.10 accept

· 放行服务端口：

nft add ip filter INPUT ip saddr