From f30c5edce0413b2b2346c7f58e801f10f6e9bc5a Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Tue, 12 Apr 2022 21:19:39 +0200 Subject: extensions: Merge SNAT, DNAT, REDIRECT and MASQUERADE REDIRECT was already merged into DNAT. Given the callback generator and generalized inner parsing routines, merging the other "flavors" is relatively simple. Rename the extension into "libxt_NAT.so" while doing so and turn the old DSOs into symlinks. Signed-off-by: Phil Sutter --- extensions/libipt_MASQUERADE.txlate | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'extensions/libipt_MASQUERADE.txlate') diff --git a/extensions/libipt_MASQUERADE.txlate b/extensions/libipt_MASQUERADE.txlate index 40b6958a..49f79d33 100644 --- a/extensions/libipt_MASQUERADE.txlate +++ b/extensions/libipt_MASQUERADE.txlate @@ -6,3 +6,12 @@ nft add rule ip nat POSTROUTING ip protocol tcp counter masquerade to :10 iptables-translate -t nat -A POSTROUTING -p tcp -j MASQUERADE --to-ports 10-20 --random nft add rule ip nat POSTROUTING ip protocol tcp counter masquerade to :10-20 random + +iptables-translate -t nat -A POSTROUTING -p tcp -j MASQUERADE --random +nft add rule ip nat POSTROUTING ip protocol tcp counter masquerade random + +iptables-translate -t nat -A POSTROUTING -p tcp -j MASQUERADE --random-fully +nft add rule ip nat POSTROUTING ip protocol tcp counter masquerade fully-random + +iptables-translate -t nat -A POSTROUTING -p tcp -j MASQUERADE --random --random-fully +nft add rule ip nat POSTROUTING ip protocol tcp counter masquerade random,fully-random -- cgit v1.2.3