Re: routing without NAT (NAPT)

[Andrei Borzenkov]

On Thu, Oct 6, 2022 at 3:32 PM Mototsugu Ohgami <gamix255(a)gmail.com&gt; wrote:
>  Hello.
>
>  I want to routing without NAT (NAPT) on a host with firewalld.
>
>  Stack Exchange posts and others have previously recommended using
>  direct rules and not using firewalld.
>  
Direct rules are part of firewalld configuration. May be you mean "use
iptables directly" without firewalld. This is always an option and you
need to decide.

> https://unix.stackexchange.com/questions/493275/firewalld-to-allow-routin...
>
>  The backend is nftables.
>  I'm using alma linux 9.
>  So the package version is firewalld-1.0.0.
>
>  Please give me some information, even if it's just a little.
>  
firewalld allows traffic between interfaces in the same zone by design.

To manage traffic between different zones use policies:
https://firewalld.org/2020/09/policy-objects-introduction