diff options
| author | Shivani Bhardwaj <shivanib134@gmail.com> | 2016-01-23 02:25:55 +0530 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-03-03 19:54:30 +0100 |
| commit | cf8e0db8aacbafac5acb1f42afd62d8215ca5863 (patch) | |
| tree | 7202b75c39b68c1a6c553a3102c7b40dce10a702 /src/netlink_delinearize.c | |
| parent | 45e5e4e92a2c882b22e95a807026611612d57729 (diff) | |
src: Add support for masquerade port selection
Provide full support for masquerading by allowing port range selection, eg.
# nft add rule nat postrouting ip protocol tcp masquerade to :1024-10024
Signed-off-by: Shivani Bhardwaj <shivanib134@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/netlink_delinearize.c')
| -rw-r--r-- | src/netlink_delinearize.c | 29 |
1 files changed, 27 insertions, 2 deletions
diff --git a/src/netlink_delinearize.c b/src/netlink_delinearize.c index fae6e33d..d431588f 100644 --- a/src/netlink_delinearize.c +++ b/src/netlink_delinearize.c @@ -726,16 +726,41 @@ static void netlink_parse_masq(struct netlink_parse_ctx *ctx, const struct location *loc, const struct nftnl_expr *nle) { + enum nft_registers reg1, reg2; + struct expr *proto; struct stmt *stmt; - uint32_t flags; + uint32_t flags = 0; - flags = 0; if (nftnl_expr_is_set(nle, NFTNL_EXPR_MASQ_FLAGS)) flags = nftnl_expr_get_u32(nle, NFTNL_EXPR_MASQ_FLAGS); stmt = masq_stmt_alloc(loc); stmt->masq.flags = flags; + reg1 = netlink_parse_register(nle, NFTNL_EXPR_MASQ_REG_PROTO_MIN); + if (reg1) { + proto = netlink_get_register(ctx, loc, reg1); + if (proto == NULL) + return netlink_error(ctx, loc, + "MASQUERADE statement" + "has no proto expression"); + expr_set_type(proto, &inet_service_type, BYTEORDER_BIG_ENDIAN); + stmt->masq.proto = proto; + } + + reg2 = netlink_parse_register(nle, NFTNL_EXPR_MASQ_REG_PROTO_MAX); + if (reg2 && reg2 != reg1) { + proto = netlink_get_register(ctx, loc, reg2); + if (proto == NULL) + return netlink_error(ctx, loc, + "MASQUERADE statement" + "has no proto expression"); + expr_set_type(proto, &inet_service_type, BYTEORDER_BIG_ENDIAN); + if (stmt->masq.proto != NULL) + proto = range_expr_alloc(loc, stmt->masq.proto, proto); + stmt->masq.proto = proto; + } + list_add_tail(&stmt->list, &ctx->rule->stmts); } |