failed to append linux nat table (iptables)

Question

When I enter command as below

iptables -t nat -A PREROUTING -i eth0 -s 10.0.0.0/8 -j DROP

it always displays

the "nat" table is not intended for filter,the use of DROP is therefore inhibited

But I get this rule from various guides,is there any miscommunication on it?

Any help will be appreciated.

Thanks.

Answer 1

因为在 nat 里做 filter 不太合适，新版本的 iptables 就废弃了这个功能。

估计你看的教程比较久远了吧

Answer 2

You can use iptables's filter table not nat table