nptv6: T2518: Support many to many DNPT(DNAT66)

1 files changed, 7 insertions, 1 deletions

diff --git a/data/templates/firewall/nftables-nat66.tmpl b/data/templates/firewall/nftables-nat66.tmpl
index af533812e..1a739cbe2 100644
--- a/data/templates/firewall/nftables-nat66.tmpl
+++ b/data/templates/firewall/nftables-nat66.tmpl
@@ -7,7 +7,13 @@
 
 {%   if chain == "PREROUTING" %}
 {%     set interface = " iifname \"" + config.inbound_interface + "\"" if config.inbound_interface is defined and config.inbound_interface != 'any' else '' %}
-{%     set trns_address = "dnat to " + config.translation.address if config.translation is defined and config.translation.address is defined and config.translation.address is not none  %}
+{%     if config.translation.address | is_ip_network %}
+{#       support 1:1 network translation #}
+{%       set dnat_type = "dnat prefix to " %}
+{%     else   %}
+{%       set dnat_type = "dnat to " %}
+{%     endif %}
+{%     set trns_address = dnat_type + config.translation.address if config.translation is defined and config.translation.address is defined and config.translation.address is not none  %}
 {%   elif chain == "POSTROUTING" %}
 {%     set interface = " oifname \"" + config.outbound_interface + "\"" if config.outbound_interface is defined and config.outbound_interface != 'any' else '' %}
 {%     set trns_prefix = "snat prefix to " + config.translation.prefix if config.translation is defined and config.translation.prefix is defined and config.translation.prefix is not none %}