diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-10-08 10:50:39 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-12-30 23:50:51 +0100 |
| commit | 4b7a4afaa240e5d2039e612e125b045d5d1cb7fa (patch) | |
| tree | 21f637d3047580ea76617af38e6fad82c9d7a5c0 /iptables/nft-shared.c | |
| parent | e8cbd65dcef62333b5e461cb264c844065b33e9a (diff) | |
xtables: fix missing ipt_entry for MASQUERADE target
The MASQUERADE target relies on the ipt_entry information that is
set in ->post_parse, which is too late.
Add a new hook called ->pre_parse, that sets the protocol
information accordingly.
Thus:
xtables -4 -A POSTROUTING -t nat -p tcp \
-j MASQUERADE --to-ports 1024
works again.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'iptables/nft-shared.c')
0 files changed, 0 insertions, 0 deletions