diff options
| author | Phil Sutter <phil@nwl.cc> | 2022-04-12 21:19:39 +0200 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2022-11-11 19:13:10 +0100 |
| commit | f30c5edce0413b2b2346c7f58e801f10f6e9bc5a (patch) | |
| tree | 3af9c625b5f54d2016e8fe4f8a2dccaea0fd4cda /extensions/libip6t_MASQUERADE.txlate | |
| parent | 0c0807bed45568b458980e65691ec4482aeb1cf3 (diff) | |
extensions: Merge SNAT, DNAT, REDIRECT and MASQUERADE
REDIRECT was already merged into DNAT. Given the callback generator and
generalized inner parsing routines, merging the other "flavors" is
relatively simple. Rename the extension into "libxt_NAT.so" while doing
so and turn the old DSOs into symlinks.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions/libip6t_MASQUERADE.txlate')
| -rw-r--r-- | extensions/libip6t_MASQUERADE.txlate | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/extensions/libip6t_MASQUERADE.txlate b/extensions/libip6t_MASQUERADE.txlate index 6c289c2b..a2f98080 100644 --- a/extensions/libip6t_MASQUERADE.txlate +++ b/extensions/libip6t_MASQUERADE.txlate @@ -6,3 +6,12 @@ nft add rule ip6 nat POSTROUTING meta l4proto tcp counter masquerade to :10 ip6tables-translate -t nat -A POSTROUTING -p tcp -j MASQUERADE --to-ports 10-20 --random nft add rule ip6 nat POSTROUTING meta l4proto tcp counter masquerade to :10-20 random + +ip6tables-translate -t nat -A POSTROUTING -p tcp -j MASQUERADE --random +nft add rule ip6 nat POSTROUTING meta l4proto tcp counter masquerade random + +ip6tables-translate -t nat -A POSTROUTING -p tcp -j MASQUERADE --random-fully +nft add rule ip6 nat POSTROUTING meta l4proto tcp counter masquerade fully-random + +ip6tables-translate -t nat -A POSTROUTING -p tcp -j MASQUERADE --random --random-fully +nft add rule ip6 nat POSTROUTING meta l4proto tcp counter masquerade random,fully-random |