提交 a82783c9 编写于 作者: F Florian Westphal 提交者: Pablo Neira Ayuso

netfilter: ip6t_NPT: restrict to mangle table

As the translation is stateless, using it in nat table
doesn't work (only initial packet is translated).
filter table OUTPUT works but won't re-route the packet after translation.
Signed-off-by: NFlorian Westphal <fw@strlen.de>
Signed-off-by: NPablo Neira Ayuso <pablo@netfilter.org>
上级 bae99f7a
...@@ -114,6 +114,7 @@ ip6t_dnpt_tg(struct sk_buff *skb, const struct xt_action_param *par) ...@@ -114,6 +114,7 @@ ip6t_dnpt_tg(struct sk_buff *skb, const struct xt_action_param *par)
static struct xt_target ip6t_npt_target_reg[] __read_mostly = { static struct xt_target ip6t_npt_target_reg[] __read_mostly = {
{ {
.name = "SNPT", .name = "SNPT",
.table = "mangle",
.target = ip6t_snpt_tg, .target = ip6t_snpt_tg,
.targetsize = sizeof(struct ip6t_npt_tginfo), .targetsize = sizeof(struct ip6t_npt_tginfo),
.checkentry = ip6t_npt_checkentry, .checkentry = ip6t_npt_checkentry,
...@@ -124,6 +125,7 @@ static struct xt_target ip6t_npt_target_reg[] __read_mostly = { ...@@ -124,6 +125,7 @@ static struct xt_target ip6t_npt_target_reg[] __read_mostly = {
}, },
{ {
.name = "DNPT", .name = "DNPT",
.table = "mangle",
.target = ip6t_dnpt_tg, .target = ip6t_dnpt_tg,
.targetsize = sizeof(struct ip6t_npt_tginfo), .targetsize = sizeof(struct ip6t_npt_tginfo),
.checkentry = ip6t_npt_checkentry, .checkentry = ip6t_npt_checkentry,
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册