Re: [PATCH v6] netfilter : add NAT support for shifted portmap ranges

2018-04-26 Thread Pablo Neira Ayuso
On Wed, Apr 04, 2018 at 03:38:22PM +0200, Thierry Du Tre wrote: > This is a patch proposal to support shifted ranges in portmaps. > (i.e. tcp/udp incoming port 5000-5100 on WAN redirected to LAN > 192.168.1.5:2000-2100) > > Currently DNAT only works for single port or identical port ranges. > (i.

[PATCH v6] netfilter : add NAT support for shifted portmap ranges

2018-04-04 Thread Thierry Du Tre
This is a patch proposal to support shifted ranges in portmaps. (i.e. tcp/udp incoming port 5000-5100 on WAN redirected to LAN 192.168.1.5:2000-2100) Currently DNAT only works for single port or identical port ranges. (i.e. ports 5000-5100 on WAN interface redirected to a LAN host while original