hello i think the script nft_nat.sh is assuming devices eth0 and eth1 which may not be the case always. my suggestion is why not give the needed network devices as arguments to the script. iam showing related command line sessions below and error related file is attached. ---------------------------x-------------x---------------------------- $ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000 link/ether 70:5a:0f:b9:d8:5c brd ff:ff:ff:ff:ff:ff 3: wlp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DORMANT group default qlen 1000 link/ether 68:14:01:07:36:1f brd ff:ff:ff:ff:ff:ff $ ------------------------x-----------x--------------------------------------- $sudo ./nft_nat.sh 2> error-related.txt ERROR: ping failed SKIP: Could not add add ip6 dnat hook ERROR: canot ping ns1 from ns2 ERROR: cannot ping ns1 from ns2 with active ip masquerading ERROR: cannot ping ns1 from ns2 via ipv6 ERROR: cannot ping ns1 from ns2 ERROR: cannot ping ns1 from ns2 with active ip redirect ERROR: cannnot ping ns1 from ns2 via ipv6 ERROR: cannot ping ns1 from ns2 with active ip6 redirect -------------------------x---------------------------x------------------------------------

a file is attached which shows the contents of error-related.txt

/Jeffrin