Hi Jozsef, On Mon, 12 Nov 2012, Jozsef Kadlecsik wrote:
What do you think about this? - add route change notification event to the net core - add --update-source-address flag to the MASQUERADE target - add a call for such events to the MASQUERADE target, when the flag is enabled The called function then can scan the conntrack table and for every entry which has got the update-source-address flag, can check whether the source IP address should be changed. Those entries are then deleted.
That sounds like a relatively easy implementation that would solve the main problem for us.
I think there might be one element missing from the above process: the actual conntrack entries created by the MASQUERADE --update-source-address rule should be marked with an UPDATE_SOURCE_ADDRESS flag, so that they can be found and deleted when the routing changes.
Perhaps the flag/option should be called "--remove-if-routing-changes" or "--routing-dependent" or something like that, since the source address is not really being (directly) changed as I proposed at the beginning?
Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 967 838 Future Business, Cam City FC, Milton Rd, Cambridge, CB4 1UY, UK Aptivate is a not-for-profit company registered in England and Wales with company number 04980791. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
