{"record":{"id":"0fb28331993fa4d9","repo":"netbirdio/netbird","slug":"add-output-dnat-rule-w","errorCode":null,"errorMessage":"add output DNAT rule: %w","messagePattern":"add output DNAT rule: %w","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"client/firewall/iptables/router_linux.go","lineNumber":1094,"sourceCode":"\n\tif _, exists := r.rules[ruleID]; exists {\n\t\treturn nil\n\t}\n\n\tif err := r.ensureNATOutputChain(); err != nil {\n\t\treturn err\n\t}\n\n\tdnatRule := []string{\n\t\t\"-p\", strings.ToLower(protoForFamily(protocol, localAddr.Is6())),\n\t\t\"--dport\", strconv.Itoa(int(originalPort)),\n\t\t\"-d\", localAddr.String(),\n\t\t\"-j\", \"DNAT\",\n\t\t\"--to-destination\", \":\" + strconv.Itoa(int(translatedPort)),\n\t}\n\n\tif err := r.iptablesClient.Append(tableNat, chainNATOutput, dnatRule...); err != nil {\n\t\treturn fmt.Errorf(\"add output DNAT rule: %w\", err)\n\t}\n\tr.rules[ruleID] = dnatRule\n\n\tr.updateState()\n\treturn nil\n}\n\n// RemoveOutputDNAT removes an OUTPUT chain DNAT rule.\nfunc (r *router) RemoveOutputDNAT(localAddr netip.Addr, protocol firewall.Protocol, originalPort, translatedPort uint16) error {\n\truleID := fmt.Sprintf(\"output-dnat-%s-%s-%d-%d\", localAddr.String(), protocol, originalPort, translatedPort)\n\n\tif dnatRule, exists := r.rules[ruleID]; exists {\n\t\tif err := r.iptablesClient.Delete(tableNat, chainNATOutput, dnatRule...); err != nil {\n\t\t\treturn fmt.Errorf(\"delete output DNAT rule: %w\", err)\n\t\t}\n\t\tdelete(r.rules, ruleID)\n\t}\n","sourceCodeStart":1076,"sourceCodeEnd":1112,"githubUrl":"https://github.com/netbirdio/netbird/blob/93e97f4bf1ad715072dcb3fb6cdb1763431b5a9c/client/firewall/iptables/router_linux.go#L1076-L1112","documentation":"Error \"add output DNAT rule: %w\" thrown in netbirdio/netbird.","triggerScenarios":"Thrown at client/firewall/iptables/router_linux.go:1094 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"93e97f4bf1ad715072dcb3fb6cdb1763431b5a9c","analyzedAt":"2026-08-16T03:09:19.136Z","schemaVersion":2},"datasetVersion":"2026-08-16T08:17:34.114Z"}