From 2edc7ccd872c60f4a71218e34e737655d6e50efa Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Tue, 13 Mar 2018 18:44:11 +0100 Subject: conntrack: add synproxy support Signed-off-by: Pablo Neira Ayuso --- src/conntrack/copy.c | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) (limited to 'src/conntrack/copy.c') diff --git a/src/conntrack/copy.c b/src/conntrack/copy.c index e6e4f7a..eca202e 100644 --- a/src/conntrack/copy.c +++ b/src/conntrack/copy.c @@ -498,6 +498,24 @@ static void copy_attr_connlabels_mask(struct nf_conntrack *dest, dest->connlabels_mask = do_copy_attr_connlabels(dest->connlabels_mask, orig->connlabels_mask); } +static void copy_attr_synproxy_its(struct nf_conntrack *dest, + const struct nf_conntrack *orig) +{ + dest->synproxy.its = orig->synproxy.its; +} + +static void copy_attr_synproxy_isn(struct nf_conntrack *dest, + const struct nf_conntrack *orig) +{ + dest->synproxy.isn = orig->synproxy.isn; +} + +static void copy_attr_synproxy_tsoff(struct nf_conntrack *dest, + const struct nf_conntrack *orig) +{ + dest->synproxy.tsoff = orig->synproxy.tsoff; +} + const copy_attr copy_attr_array[ATTR_MAX] = { [ATTR_ORIG_IPV4_SRC] = copy_attr_orig_ipv4_src, [ATTR_ORIG_IPV4_DST] = copy_attr_orig_ipv4_dst, @@ -571,6 +589,9 @@ const copy_attr copy_attr_array[ATTR_MAX] = { [ATTR_CONNLABELS_MASK] = copy_attr_connlabels_mask, [ATTR_SNAT_IPV6] = copy_attr_snat_ipv6, [ATTR_DNAT_IPV6] = copy_attr_dnat_ipv6, + [ATTR_SYNPROXY_ITS] = copy_attr_synproxy_its, + [ATTR_SYNPROXY_ISN] = copy_attr_synproxy_isn, + [ATTR_SYNPROXY_TSOFF] = copy_attr_synproxy_tsoff, }; /* this is used by nfct_copy() with the NFCT_CP_OVERRIDE flag set. */ -- cgit v1.2.3