| Message ID | 20160301183547.GA12993@gmail.com |
|---|---|
| State | Changes Requested |
| Delegated to: | Pablo Neira |
| Headers | show |
On Wed, Mar 02, 2016 at 12:05:47AM +0530, Shivani Bhardwaj wrote: > Add translation for target masquerade to nftables. > Full translation of this target awaits the support for --to-ports > option. Just sent the patch to support this. Could you add translation for that and send a v2? Thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
diff --git a/extensions/libip6t_MASQUERADE.c b/extensions/libip6t_MASQUERADE.c index eb9213e..325cdcd 100644 --- a/extensions/libip6t_MASQUERADE.c +++ b/extensions/libip6t_MASQUERADE.c @@ -131,6 +131,20 @@ MASQUERADE_save(const void *ip, const struct xt_entry_target *target) printf(" --random"); } +static int +MASQUERADE_xlate(const struct xt_entry_target *target, + struct xt_xlate *xl, int numeric) +{ + const struct nf_nat_range *r = (const void *)target->data; + + xt_xlate_add(xl, "masquerade "); + + if (r->flags & NF_NAT_RANGE_PROTO_RANDOM) + xt_xlate_add(xl, "random "); + + return 1; +} + static struct xtables_target masquerade_tg_reg = { .name = "MASQUERADE", .version = XTABLES_VERSION, @@ -142,6 +156,7 @@ static struct xtables_target masquerade_tg_reg = { .print = MASQUERADE_print, .save = MASQUERADE_save, .x6_options = MASQUERADE_opts, + .xlate = MASQUERADE_xlate, }; void _init(void)
Add translation for target masquerade to nftables. Full translation of this target awaits the support for --to-ports option. Examples: $ sudo ip6tables-translate -t nat -A POSTROUTING -o eth0 -j MASQUERADE nft add rule ip6 nat POSTROUTING oifname eth0 counter masquerade $ sudo ip6tables-translate -t nat -A POSTROUTING -j MASQUERADE --random nft add rule ip6 nat POSTROUTING counter masquerade random Signed-off-by: Shivani Bhardwaj <shivanib134@gmail.com> --- extensions/libip6t_MASQUERADE.c | 15 +++++++++++++++ 1 file changed, 15 insertions(+)