Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 58a317f1 authored by Patrick McHardy's avatar Patrick McHardy Committed by Pablo Neira Ayuso
Browse files

netfilter: ipv6: add IPv6 NAT support 



Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent 2cf545e8

include/linux/netfilter/nfnetlink_conntrack.h

+2 −0
Original line number Diff line number Diff line
@@ -147,6 +147,8 @@ enum ctattr_nat { 
	CTA_NAT_V4_MAXIP,

#define CTA_NAT_MAXIP CTA_NAT_V4_MAXIP

	CTA_NAT_PROTO,

	CTA_NAT_V6_MINIP,

	CTA_NAT_V6_MAXIP,

	__CTA_NAT_MAX

};

#define CTA_NAT_MAX (__CTA_NAT_MAX - 1)

include/net/netfilter/nf_nat_l3proto.h

+5 −0
Original line number Diff line number Diff line
@@ -43,5 +43,10 @@ extern int nf_nat_icmp_reply_translation(struct sk_buff *skb, 
					 struct nf_conn *ct,

					 enum ip_conntrack_info ctinfo,

					 unsigned int hooknum);

extern int nf_nat_icmpv6_reply_translation(struct sk_buff *skb,

					   struct nf_conn *ct,

					   enum ip_conntrack_info ctinfo,

					   unsigned int hooknum,

					   unsigned int hdrlen);



#endif /* _NF_NAT_L3PROTO_H */

include/net/netfilter/nf_nat_l4proto.h

+1 −0
Original line number Diff line number Diff line
@@ -51,6 +51,7 @@ extern const struct nf_nat_l4proto *__nf_nat_l4proto_find(u8 l3proto, u8 l4proto 
extern const struct nf_nat_l4proto nf_nat_l4proto_tcp;

extern const struct nf_nat_l4proto nf_nat_l4proto_udp;

extern const struct nf_nat_l4proto nf_nat_l4proto_icmp;

extern const struct nf_nat_l4proto nf_nat_l4proto_icmpv6;

extern const struct nf_nat_l4proto nf_nat_l4proto_unknown;



extern bool nf_nat_l4proto_in_range(const struct nf_conntrack_tuple *tuple,

include/net/netns/ipv6.h

+1 −0
Original line number Diff line number Diff line
@@ -42,6 +42,7 @@ struct netns_ipv6 { 
#ifdef CONFIG_SECURITY

	struct xt_table		*ip6table_security;

#endif

	struct xt_table		*ip6table_nat;

#endif

	struct rt6_info         *ip6_null_entry;

	struct rt6_statistics   *rt6_stats;

net/core/secure_seq.c

+1 −0
Original line number Diff line number Diff line
@@ -76,6 +76,7 @@ u32 secure_ipv6_port_ephemeral(const __be32 *saddr, const __be32 *daddr, 


	return hash[0];

}

EXPORT_SYMBOL(secure_ipv6_port_ephemeral);

#endif



#ifdef CONFIG_INET