From 73ad642ba462d0992e1903012eee4ebfec89ed69 Mon Sep 17 00:00:00 2001 From: Arturo Borrero Date: Wed, 18 May 2016 10:56:36 +0200 Subject: src: add support for IPv6 NAT The conntrackd daemon lacks support for syncing IPv6 NATed connections. This patch adds support for managing the IPv6 part of struct __nfct_nat, also updating the corresponsing symbols. Signed-off-by: Arturo Borrero Gonzalez Signed-off-by: Pablo Neira Ayuso --- src/conntrack/getter.c | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'src/conntrack/getter.c') diff --git a/src/conntrack/getter.c b/src/conntrack/getter.c index 20dd905..e818a05 100644 --- a/src/conntrack/getter.c +++ b/src/conntrack/getter.c @@ -214,6 +214,16 @@ static const void *get_attr_dnat_ipv4(const struct nf_conntrack *ct) return &ct->dnat.min_ip.v4; } +static const void *get_attr_snat_ipv6(const struct nf_conntrack *ct) +{ + return &ct->snat.min_ip.v6; +} + +static const void *get_attr_dnat_ipv6(const struct nf_conntrack *ct) +{ + return &ct->dnat.min_ip.v6; +} + static const void *get_attr_snat_port(const struct nf_conntrack *ct) { return &ct->snat.l4min.all; @@ -430,4 +440,6 @@ const get_attr get_attr_array[ATTR_MAX] = { [ATTR_HELPER_INFO] = get_attr_helper_info, [ATTR_CONNLABELS] = get_attr_connlabels, [ATTR_CONNLABELS_MASK] = get_attr_connlabels_mask, + [ATTR_SNAT_IPV6] = get_attr_snat_ipv6, + [ATTR_DNAT_IPV6] = get_attr_dnat_ipv6, }; -- cgit v1.2.3