Add translation for target masquerade to nftables. Full translation of this target awaits the support for --to-ports option.
Examples: $ sudo ip6tables-translate -t nat -A POSTROUTING -o eth0 -j MASQUERADE nft add rule ip6 nat POSTROUTING oifname eth0 counter masquerade $ sudo ip6tables-translate -t nat -A POSTROUTING -j MASQUERADE --random nft add rule ip6 nat POSTROUTING counter masquerade random Signed-off-by: Shivani Bhardwaj <[email protected]> --- extensions/libip6t_MASQUERADE.c | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/extensions/libip6t_MASQUERADE.c b/extensions/libip6t_MASQUERADE.c index eb9213e..325cdcd 100644 --- a/extensions/libip6t_MASQUERADE.c +++ b/extensions/libip6t_MASQUERADE.c @@ -131,6 +131,20 @@ MASQUERADE_save(const void *ip, const struct xt_entry_target *target) printf(" --random"); } +static int +MASQUERADE_xlate(const struct xt_entry_target *target, + struct xt_xlate *xl, int numeric) +{ + const struct nf_nat_range *r = (const void *)target->data; + + xt_xlate_add(xl, "masquerade "); + + if (r->flags & NF_NAT_RANGE_PROTO_RANDOM) + xt_xlate_add(xl, "random "); + + return 1; +} + static struct xtables_target masquerade_tg_reg = { .name = "MASQUERADE", .version = XTABLES_VERSION, @@ -142,6 +156,7 @@ static struct xtables_target masquerade_tg_reg = { .print = MASQUERADE_print, .save = MASQUERADE_save, .x6_options = MASQUERADE_opts, + .xlate = MASQUERADE_xlate, }; void _init(void) -- 1.9.1 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
