• Arturo Borrero's avatar
    netfilter: nft_nat: include a flag attribute · e42eff8a
    Arturo Borrero authored
    Both SNAT and DNAT (and the upcoming masquerade) can have additional
    configuration parameters, such as port randomization and NAT addressing
    persistence. We can cover these scenarios by simply adding a flag
    attribute for userspace to fill when needed.
    
    The flags to use are defined in include/uapi/linux/netfilter/nf_nat.h:
    
     NF_NAT_RANGE_MAP_IPS
     NF_NAT_RANGE_PROTO_SPECIFIED
     NF_NAT_RANGE_PROTO_RANDOM
     NF_NAT_RANGE_PERSISTENT
     NF_NAT_RANGE_PROTO_RANDOM_FULLY
     NF_NAT_RANGE_PROTO_RANDOM_ALL
    
    The caller must take care of not messing up with the flags, as they are
    added unconditionally to the final resulting nf_nat_range.
    Signed-off-by: default avatarArturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
    Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
    e42eff8a
nft_nat.c 6.33 KB