Nat ICMP

firewall.py

@@ -607,6 +607,12 @@ def get_ip_iterable_from_str(ip):
 
 class NAT:
 
+    PROTOCOLS = (
+            'tcp',
+            'udp',
+            'icmp'
+    )
+
     def __init__(self,
                  name,
                  range_in,
@@ -648,22 +654,16 @@ class NAT:
             grp: The name of the group
             ports: The port range (str)
         """
-        CommandExec.run([
+        for protocol in self.PROTOCOLS:
-            *self.nft,
+            CommandExec.run([
-            "add rule ip nat {name}_nat ip saddr @{name}_nat_port_{grp} ip protocol tcp snat ip saddr map @{name}_nat_address : {ports}".format(
+                *self.nft,
-                name=self.name,
+                "add rule ip nat {name}_nat ip saddr @{name}_nat_port_{grp} ip protocol {protocol} snat ip saddr map @{name}_nat_address : {ports}".format(
-                grp=grp,
+                    protocol=protocol,
-                ports=ports
+                    name=self.name,
-            )
+                    grp=grp,
-        ])
+                    ports=ports
-        CommandExec.run([
+                )
-            *self.nft,
+            ])
-            "add rule ip nat {name}_nat ip saddr @{name}_nat_port_{grp} ip protocol udp snat ip saddr map @{name}_nat_address : {ports}".format(
-                name=self.name,
-                grp=grp,
-                ports=ports
-            )
-        ])
 
     def manage(self):
         """Creates the port sets, ip map and rules