<html> <head> <style></style></head> <body class='hmmessage'><div dir='ltr'><div>> Date: Fri, 15 Jul 2016 19:30:52 +0200<br>> From: lennart@poettering.net<br>> To: christrobridge@hotmail.com<br>> CC: systemd-devel@lists.freedesktop.org<br>> Subject: Re: [systemd-devel] systemd IPMasquerade<br>> <br>> On Fri, 15.07.16 13:49, Chris Trobridge (christrobridge@hotmail.com) wrote:<br>> <br>> > I have managed to configure enough support in my kernel to enable me<br>> > to use nft to establish IP Masquerading but systemd-networkd is<br>> > still reporting "Could not enable IP masquerading: Operation not<br>> > supported". What kernel configuration is required for systemd to<br>> > control IP masquerading?<br>> ><br>> > I have the nftables userland tools installed but are there any other<br>> > packages required by systemd?<br>> <br>> networkd and nspawn use the "iptables" kernel APIs, not "nftables", as<br>> that is not really universally available yet. Our intention is<br>> certainly to support nftables eventuall, but we aren#t there yet.<br>> <br>> Lennart<br><br></div><div>Thanks Lennart,</div><div><br></div><div>I thought I had iptables in place already and so assumed it needed nftables following a quick search on the error message.</div><div><br></div><div>I enabled more nftables modules to get it working from the command line so I will have a look at using iptables or investigate the nftables compatibility modules for iptables.</div><div><br></div><div>Cheers,</div><div>Chris</div><div><br></div> </div></body> </html>