Re: Stateless NAT in nftables with maps for performance

Florian Westphal <[email protected]> Fri, 12 Sep 2025 14:23:46 +0200
Newsgroups gmane.comp.security.firewalls.netfilter.general
Message-ID <[email protected]>
Florian Westphal <[email protected]> wrote:
> ip daddr set ip daddr map @dnat_map

Forgot the usual disclaimer: this breaks icmp(v6).

There is a reason for existence of stateful nat after all.