Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There seems to be some rumors floating around that stateless NAT exists in linux in a non-depreciated form (unlike iproute2) as of 2.6.24: ...

However, I can't find any documentation on how this might work. Anyone have an idea of how this works?

share|improve this question
Zow, the documentation for tc looks sparse! The tc action nat egress (assuming is the private IP and is the public IP) will do what you want, but getting the packets classified to allow the nat action to apply looks like more than I can glean from reading. W/o having the tools at hand I think that's the best I can say. – Evan Anderson Jul 27 '10 at 15:54
Ya, I think I am just going to go with the NO nat for the important stuff. It just didn't cross my mind that I could still NAT address even if they were assigned to an interface since the NAT is pre routing. – Kyle Brandt Jul 27 '10 at 16:00

Are you sure iproute2 has been deprecated?

See this doc.

share|improve this answer
Yes I should have linked to that in my question. I was using that and the ip command shoots back a depreciation warning. – Kyle Brandt Jul 27 '10 at 15:38
That doc also links to how to emulate stateless NAT with netfilter ... from what I can tell the author just made that up :-) – Kyle Brandt Jul 27 '10 at 15:39
The Guide to IP Layer Network Administration with Linux is outdated. No more route NAT in Linux 2.6 onward. – hillu Sep 6 '12 at 19:16

I just implemented stateless NAT on a Debian/squeeze system based on a 2.6.32 kernel, I did not get it running with built-in features, but the xtables-addons-* packages that provide the RAWSNAT and RAWDNAT features were useful.

The ip-route(8) manpage contains a notice about route NAT no longer being supported in Linux 2.6.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.