Такая штука попалась. На некотором серваке с CentOS 7.3 не работает NAT. Ну то есть во так:
# iptables -t nat -L
iptables v1.4.21: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
$ ls -l /lib/modules/2.6.32-042stab108.2/kernel/net/ipv4/netfilter
total 520
-rwxr--r--. 1 root root 7912 May 12 2015 arptable_filter.ko
-rwxr--r--. 1 root root 32232 May 12 2015 arp_tables.ko
-rwxr--r--. 1 root root 5688 May 12 2015 arpt_mangle.ko
-rwxr--r--. 1 root root 20816 May 12 2015 ip_queue.ko
-rwxr--r--. 1 root root 8992 May 12 2015 iptable_filter.ko
-rwxr--r--. 1 root root 9040 May 12 2015 iptable_mangle.ko
-rwxr--r--. 1 root root 16216 May 12 2015 iptable_nat.ko
-rwxr--r--. 1 root root 7280 May 12 2015 iptable_raw.ko
-rwxr--r--. 1 root root 37600 May 12 2015 ip_tables.ko
-rwxr--r--. 1 root root 6592 May 12 2015 ipt_addrtype.ko
-rwxr--r--. 1 root root 5136 May 12 2015 ipt_ah.ko
-rwxr--r--. 1 root root 20232 May 12 2015 ipt_CLUSTERIP.ko
-rwxr--r--. 1 root root 5728 May 12 2015 ipt_ecn.ko
-rwxr--r--. 1 root root 6760 May 12 2015 ipt_ECN.ko
-rwxr--r--. 1 root root 15984 May 12 2015 ipt_LOG.ko
-rwxr--r--. 1 root root 7304 May 12 2015 ipt_MASQUERADE.ko
-rwxr--r--. 1 root root 6944 May 12 2015 ipt_NETMAP.ko
-rwxr--r--. 1 root root 6992 May 12 2015 ipt_REDIRECT.ko
-rwxr--r--. 1 root root 8568 May 12 2015 ipt_REJECT.ko
-rwxr--r--. 1 root root 21320 May 12 2015 ipt_ULOG.ko
-rwxr--r--. 1 root root 26504 May 12 2015 nf_conntrack_ipv4.ko
-rwxr--r--. 1 root root 6216 May 12 2015 nf_defrag_ipv4.ko
-rwxr--r--. 1 root root 6000 May 12 2015 nf_nat_amanda.ko
-rwxr--r--. 1 root root 10640 May 12 2015 nf_nat_ftp.ko
-rwxr--r--. 1 root root 20680 May 12 2015 nf_nat_h323.ko
-rwxr--r--. 1 root root 7888 May 12 2015 nf_nat_irc.ko
-rwxr--r--. 1 root root 46040 May 12 2015 nf_nat.ko
-rwxr--r--. 1 root root 13528 May 12 2015 nf_nat_pptp.ko
-rwxr--r--. 1 root root 6096 May 12 2015 nf_nat_proto_dccp.ko
-rwxr--r--. 1 root root 9904 May 12 2015 nf_nat_proto_gre.ko
-rwxr--r--. 1 root root 6112 May 12 2015 nf_nat_proto_sctp.ko
-rwxr--r--. 1 root root 6056 May 12 2015 nf_nat_proto_udplite.ko
-rwxr--r--. 1 root root 14856 May 12 2015 nf_nat_sip.ko
-rwxr--r--. 1 root root 19048 May 12 2015 nf_nat_snmp_basic.ko
-rwxr--r--. 1 root root 5216 May 12 2015 nf_nat_tftp.ko
$ lsmod | grep iptable
iptable_nat 6219 0
nf_nat 23730 4 ipt_REDIRECT,ipt_MASQUERADE,nf_nat_ftp,iptable_nat
iptable_mangle 3453 0
nf_conntrack_ipv4 9938 3 iptable_nat,nf_nat
nf_conntrack 81301 8 xt_helper,xt_conntrack,nf_nat_ftp,nf_conntrack_ftp,iptable_nat,nf_nat,xt_state,nf_conntrack_ipv4
iptable_filter 2897 8
ip_tables 18087 3 iptable_nat,iptable_mangle,iptable_filter
$ lsmod | grep nf_
nf_nat_ftp 3515 0
nf_conntrack_ftp 12929 1 nf_nat_ftp
nf_nat 23730 4 ipt_REDIRECT,ipt_MASQUERADE,nf_nat_ftp,iptable_nat
nf_conntrack_ipv4 9938 3 iptable_nat,nf_nat
nf_conntrack 81301 8 xt_helper,xt_conntrack,nf_nat_ftp,nf_conntrack_ftp,iptable_nat,nf_nat,xt_state,nf_conntrack_ipv4
nf_defrag_ipv4 1523 1 nf_conntrack_ipv4
$ lsmod | grep ipt_
ipt_REDIRECT 1880 0
ipt_MASQUERADE 1984 0
nf_nat 23730 4 ipt_REDIRECT,ipt_MASQUERADE,nf_nat_ftp,iptable_nat
ipt_LOG 6397 0
ipt_REJECT 2391 1
# modprobe ip_tables
# modprobe iptable_filter
# modprobe iptable_nat
# modprobe iptable_filter
# modprobe iptable_raw
# modprobe nf_nat
# modprobe ipt_MASQUERADE
# modprobe ipt_NETMAP
Можно ли включить NAT без перезагрузки сервера?