diff options
| author | Arturo Borrero <arturo.borrero.glez@gmail.com> | 2016-05-18 19:05:12 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-05-20 11:36:45 +0200 |
| commit | 367ebb13c9a21d59633d307fafc12337b46888eb (patch) | |
| tree | 81a0d59dc1ef038b68b22b55274dbb86a41c8382 /src/parse.c | |
| parent | 5b76aa21481d5895cd8e301dc554c42f02c1374a (diff) | |
conntrackd: add support for NTA_(S|D)NAT_IPV6
So we can properly sync NATed IPv6 connections.
Thanks to Florian Westphal for originally ponting me to this lack of
support in conntrackd, which saved me a lot of time.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/parse.c')
| -rw-r--r-- | src/parse.c | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/src/parse.c b/src/parse.c index 919d36c..d5d9b59 100644 --- a/src/parse.c +++ b/src/parse.c @@ -29,6 +29,7 @@ static void ct_parse_u8(struct nf_conntrack *ct, int attr, void *data); static void ct_parse_u16(struct nf_conntrack *ct, int attr, void *data); static void ct_parse_u32(struct nf_conntrack *ct, int attr, void *data); +static void ct_parse_u128(struct nf_conntrack *ct, int attr, void *data); static void ct_parse_str(struct nf_conntrack *ct, const struct netattr *, void *data); static void ct_parse_group(struct nf_conntrack *ct, int attr, void *data); @@ -189,6 +190,16 @@ static struct ct_parser h[NTA_MAX] = { .attr = ATTR_CONNLABELS, .max_size = NTA_SIZE(NTA_LABELS_MAX_SIZE), }, + [NTA_SNAT_IPV6] = { + .parse = ct_parse_u128, + .attr = ATTR_SNAT_IPV6, + .size = NTA_SIZE(sizeof(uint32_t) * 4), + }, + [NTA_DNAT_IPV6] = { + .parse = ct_parse_u128, + .attr = ATTR_DNAT_IPV6, + .size = NTA_SIZE(sizeof(uint32_t) * 4), + }, }; static void @@ -213,6 +224,12 @@ ct_parse_u32(struct nf_conntrack *ct, int attr, void *data) } static void +ct_parse_u128(struct nf_conntrack *ct, int attr, void *data) +{ + nfct_set_attr(ct, h[attr].attr, data); +} + +static void ct_parse_str(struct nf_conntrack *ct, const struct netattr *attr, void *data) { nfct_set_attr(ct, h[attr->nta_attr].attr, data); |