On Wed, Nov 28, 2018 at 02:47:10AM -0000, Paul D wrote:
> feature yet.  Specifically, it's introduced in this commit on the
> iptables codebase:
> https://git.netfilter.org/iptables/commit/?id=8b0da2130b8af3890ef20afb2305f11224bb39ec.

I think this relies upon this kernel feature:

commit 34ce324019e76f6d93768d68343a0e78f464d754
Author: Daniel Borkmann <[email protected]>
Date:   Fri Dec 20 22:40:29 2013 +0100

    netfilter: nf_nat: add full port randomization support


Given the date I'm optimistic that this should be supported in our
kernels, but some confirmation would be nice.

The iptables patch looks pretty simple.

It seems like a good candidate for an SRU to me.

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1805543

Title:
  Packaged version of iptables doesn't provide --random-fully flag.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/iptables/+bug/1805543/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to