ss-nat(1)
=========

NAME
----
ss-nat - helper script to setup NAT rules for transparent proxy

SYNOPSIS
--------
// Generated by scripts/gen_cli_docs.py from src/ss-nat; do not edit this section.

*ss-nat* [-s <server_ip>] [-l <local_port>] [-S <server_ip>] [-L <local_port>]
 [-i <ip_list_file>] [-I <interface>] [-e <extra_options>] [-a <lan_ips>] [-b
 <wan_ips>] [-w <wan_ips>] [-o] [-u] [-U] [-f] [-h]

DESCRIPTION
-----------
*shadowsocks-c* is a lightweight and secure socks5 proxy.
It is a port of the original shadowsocks created by clowwindy.
*shadowsocks-c* is written in pure C and takes advantage of libuv to
achieve both high performance and low resource consumption.

`ss-nat`(1) sets up NAT rules for `ss-redir`(1) to provide traffic redirection.
It requires netfilter's NAT module and `iptables`(8).
For more information, check out `shadowsocks-libev`(8) and the following
'EXAMPLE' section.

OPTIONS
-------
// Generated by scripts/gen_cli_docs.py from src/ss-nat; do not edit this section.

This section lists options across supported builds. Platform and feature
restrictions are noted below; not every option is effective on every platform.

-s <server_ip>::
IP address of shadowsocks remote server

-l <local_port>::
Port number of shadowsocks local server

-S <server_ip>::
IP address of shadowsocks remote UDP server

-L <local_port>::
Port number of shadowsocks local UDP server

-i <ip_list_file>::
a file whose content is bypassed ip list

-I <interface>::
Set the LAN interface for NAT rules. The default is eth0.

-e <extra_options>::
Extra options for iptables

-a <lan_ips>::
LAN IP of access control, need a prefix to define access control mode

-b <wan_ips>::
WAN IP of will be bypassed

-w <wan_ips>::
WAN IP of will be forwarded

-o::
Apply the rules to the OUTPUT chain

-u::
Enable udprelay mode, TPROXY is required

-U::
Enable udprelay mode, using different IP and ports for TCP and UDP

-f::
Flush the rules

-h::
Show this help message and exit

EXAMPLE
-------
`ss-nat` requires `iptables`(8). Here is an example:

....
# Enable NAT rules for shadowsocks,
# with both TCP and UDP redirection enabled,
# and applied for both PREROUTING and OUTPUT chains
root@Wrt:~# ss-nat -s 192.168.1.100 -l 1080 -u -o

# Disable and flush all NAT rules for shadowsocks
root@Wrt:~# ss-nat -f
....

SEE ALSO
--------
`ss-local`(1),
`ss-server`(1),
`ss-tunnel`(1),
`ss-manager`(1),
`shadowsocks-libev`(8),
`iptables`(8),
/etc/shadowsocks-libev/config.json