> On Thu, Aug 29, 2013 at 10:36 AM, Adam Novak <[email protected]> wrote:

[ ... ]

That diff [0] you pointed to is IMHO wrong...

With Linux v3.7 it is now CONFIG_NF_NAT_IPV4 [1] and
CONFIG_NF_NAT_IPV6 [2] was 1st introduced.

I checked the netfilter kernel-modules here on Ubuntu/precise with
raring-lts v3.8 kernel.

[ include/netfilter.mk ]

ifeq ($(NF_KMOD),1)
P_V4:=ipv4/netfilter/
P_V6:=ipv6/netfilter/
P_XT:=netfilter/
P_EBT:=bridge/netfilter/
endif

[ P_XT ]

/lib/modules/3.8.0-30-generic/kernel/net/netfilter/nf_nat.ko
/lib/modules/3.8.0-30-generic/kernel/net/netfilter/xt_nat.ko

( I don't know why this both kernel-modules are required with
nf_nat_ipv4.ko together. )

[ P_V4 ]

/lib/modules/3.8.0-30-generic/kernel/net/ipv4/netfilter/nf_nat_ipv4.ko

[ P_V6 ]

/lib/modules/3.8.0-30-generic/kernel/net/ipv6/netfilter/nf_nat_ipv6.ko

[ KERNEL-MODULE NF-NAT (IPv4) ]

-$(eval $(if $(NF_KMOD),$(call nf_add,IPT_NAT,CONFIG_NF_NAT,
$(P_XT)nf_nat $(P_V4)nf_nat_ipv4 $(P_XT)xt_nat $(P_V4)iptable_nat, ge
3.7.0),))

+$(eval $(if $(NF_KMOD),$(call nf_add,IPT_NAT,CONFIG_NF_NAT_IPV4,
$(P_XT)nf_nat $(P_V4)nf_nat_ipv4 $(P_XT)xt_nat $(P_V4)iptable_nat, ge
3.7.0),))

[ KERNEL-MODULE NF-NAT (IPv6) ]

+$(eval $(if $(NF_KMOD),$(call nf_add,IPT_NAT,CONFIG_NF_NAT_IPV6,
$(P_V6)nf_nat_ipv6 $(P_V6)ip6table_nat, ge 3.8.0),))

[ USER-SPACE ]

I am unsure if the iptables package shipped with OpenWrt (trunk) has
netfilter-nat IPv6 support (for firewall settings).

You can try the attached experimental patch.

- Sedat -

[0] https://dev.openwrt.org/attachment/ticket/13446/netfilter.3.diff
[1] 
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/tree/net/ipv4/netfilter/Makefile?id=v3.7#n17
[2] 
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/tree/net/ipv6/netfilter/Makefile?id=v3.7#n11
_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel

Reply via email to