I have a certain packet that I want at all times to be redirected to a specific ip on my virtual network interface. As for now my iptables is setup like this:
(the commands, I use \ as for now to make it more readable, read as "combine next line to this line" :) ) For allowed IP's:
iptables \
-t nat -A PREROUTING \
-i vmbr0 -p udp --dport 7777 \
-m set --match-set whitelist \
-j DNAT --to 192.168.0.1:7777
For disallowed IP's:
iptables \
-t nat -A PREROUTING \
-i vmbr0 -p udp --dport 7777 \
-m set ! --match-set whitelist \
-j DNAT --to 192.168.0.1:7778
But there is a certain udp packet (that matches some hex, preferably with wildcards if possible) that I want to pass to 192.168.0.1:7777
regardless of the whitelist entry, how would I do that?
So eventually this would be the result: