From 2edc7ccd872c60f4a71218e34e737655d6e50efa Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Tue, 13 Mar 2018 18:44:11 +0100 Subject: conntrack: add synproxy support Signed-off-by: Pablo Neira Ayuso --- src/conntrack/setter.c | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) (limited to 'src/conntrack/setter.c') diff --git a/src/conntrack/setter.c b/src/conntrack/setter.c index 75ab09e..7b96936 100644 --- a/src/conntrack/setter.c +++ b/src/conntrack/setter.c @@ -467,6 +467,24 @@ set_attr_connlabels_mask(struct nf_conntrack *ct, const void *value, size_t len) ct->connlabels_mask = (void *) value; } +static void +set_attr_synproxy_isn(struct nf_conntrack *ct, const void *value, size_t len) +{ + ct->synproxy.isn = *((uint32_t *) value); +} + +static void +set_attr_synproxy_its(struct nf_conntrack *ct, const void *value, size_t len) +{ + ct->synproxy.its = *((uint32_t *) value); +} + +static void +set_attr_synproxy_tsoff(struct nf_conntrack *ct, const void *value, size_t len) +{ + ct->synproxy.tsoff = *((uint32_t *) value); +} + static void set_attr_do_nothing(struct nf_conntrack *ct, const void *value, size_t len) {} @@ -543,4 +561,7 @@ const set_attr set_attr_array[ATTR_MAX] = { [ATTR_CONNLABELS_MASK] = set_attr_connlabels_mask, [ATTR_SNAT_IPV6] = set_attr_snat_ipv6, [ATTR_DNAT_IPV6] = set_attr_dnat_ipv6, + [ATTR_SYNPROXY_ISN] = set_attr_synproxy_isn, + [ATTR_SYNPROXY_ITS] = set_attr_synproxy_its, + [ATTR_SYNPROXY_TSOFF] = set_attr_synproxy_tsoff, }; -- cgit v1.2.3