diff options
| author | Jose M. Guisado Gomez <guigom@riseup.net> | 2019-09-30 19:28:07 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-10-01 20:27:43 +0200 |
| commit | 702b543494e1c52782ed4f011f13f6085f4fbbf7 (patch) | |
| tree | cf6fac4eb6a7f924bbcc2ff37a65be8929bebc2b /extensions/libxt_SYNPROXY.txlate | |
| parent | 2a459ebc0ee53a57a92631fa07f6bf2b4f3fbc8c (diff) | |
extensions: libxt_SYNPROXY: add xlate method
This adds translation capabilities when encountering SYNPROXY inside
iptables rules.
Signed-off-by: Jose M. Guisado Gomez <guigom@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_SYNPROXY.txlate')
| -rw-r--r-- | extensions/libxt_SYNPROXY.txlate | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/extensions/libxt_SYNPROXY.txlate b/extensions/libxt_SYNPROXY.txlate new file mode 100644 index 00000000..b3de2b2a --- /dev/null +++ b/extensions/libxt_SYNPROXY.txlate @@ -0,0 +1,2 @@ +iptables-translate -t mangle -A INPUT -i iifname -p tcp -m tcp --dport 80 -m state --state INVALID,UNTRACKED -j SYNPROXY --sack-perm --timestamp --wscale 7 --mss 1460 +nft add rule ip mangle INPUT iifname "iifname" tcp dport 80 ct state invalid,untracked counter synproxy sack-perm timestamp wscale 7 mss 1460 |