Skip to main content
1 vote
Accepted

nftables does not catch a packet it has already seen

It is a feature specifically in the Netfilter nat hook1, of both iptables and nftables. Linux NAT is stateful, as it has the requirements that e.g. every packet belonging to the same flow would be ...
grawity_u1686's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible