]> git.karo-electronics.de Git - karo-tx-linux.git/commit
netfilter: nf_nat: add support for persistent mappings
authorPatrick McHardy <kaber@trash.net>
Thu, 16 Apr 2009 16:33:01 +0000 (18:33 +0200)
committerPatrick McHardy <kaber@trash.net>
Thu, 16 Apr 2009 16:33:01 +0000 (18:33 +0200)
commit98d500d66cb7940747b424b245fc6a51ecfbf005
tree0c5d745901be7aab151071829a8dc6fac193fb30
parent38fb0afcd8761f8858e27135ed89a65117e2019c
netfilter: nf_nat: add support for persistent mappings

The removal of the SAME target accidentally removed one feature that is
not available from the normal NAT targets so far, having multi-range
mappings that use the same mapping for each connection from a single
client. The current behaviour is to choose the address from the range
based on source and destination IP, which breaks when communicating
with sites having multiple addresses that require all connections to
originate from the same IP address.

Introduce a IP_NAT_RANGE_PERSISTENT option that controls whether the
destination address is taken into account for selecting addresses.

http://bugzilla.kernel.org/show_bug.cgi?id=12954

Signed-off-by: Patrick McHardy <kaber@trash.net>
include/net/netfilter/nf_nat.h
net/ipv4/netfilter/nf_nat_core.c