diff options
| author | Arturo Borrero <arturo.borrero.glez@gmail.com> | 2016-05-18 10:56:36 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-05-20 11:35:50 +0200 |
| commit | 73ad642ba462d0992e1903012eee4ebfec89ed69 (patch) | |
| tree | c7ec2b1f6ac71053124e32d3cc8cfb0489512a28 /src/conntrack/setter.c | |
| parent | f5e51ad64d9e5597e8880b652abe261585c2563d (diff) | |
src: add support for IPv6 NAT
The conntrackd daemon lacks support for syncing IPv6 NATed connections.
This patch adds support for managing the IPv6 part of struct __nfct_nat,
also updating the corresponsing symbols.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/conntrack/setter.c')
| -rw-r--r-- | src/conntrack/setter.c | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/src/conntrack/setter.c b/src/conntrack/setter.c index e103646..75ab09e 100644 --- a/src/conntrack/setter.c +++ b/src/conntrack/setter.c @@ -247,6 +247,20 @@ set_attr_dnat_ipv4(struct nf_conntrack *ct, const void *value, size_t len) } static void +set_attr_snat_ipv6(struct nf_conntrack *ct, const void *value, size_t len) +{ + memcpy(&ct->snat.min_ip.v6, value, sizeof(struct in6_addr)); + memcpy(&ct->snat.max_ip.v6, value, sizeof(struct in6_addr)); +} + +static void +set_attr_dnat_ipv6(struct nf_conntrack *ct, const void *value, size_t len) +{ + memcpy(&ct->dnat.min_ip.v6, value, sizeof(struct in6_addr)); + memcpy(&ct->dnat.max_ip.v6, value, sizeof(struct in6_addr)); +} + +static void set_attr_snat_port(struct nf_conntrack *ct, const void *value, size_t len) { ct->snat.l4min.all = ct->snat.l4max.all = *((uint16_t *) value); @@ -527,4 +541,6 @@ const set_attr set_attr_array[ATTR_MAX] = { [ATTR_HELPER_INFO] = set_attr_helper_info, [ATTR_CONNLABELS] = set_attr_connlabels, [ATTR_CONNLABELS_MASK] = set_attr_connlabels_mask, + [ATTR_SNAT_IPV6] = set_attr_snat_ipv6, + [ATTR_DNAT_IPV6] = set_attr_dnat_ipv6, }; |