Re: [PATCH] iptables: allow IPv6 port NAT without address NAT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Pablo,

On 01/03/13 01:13, Pablo Neira Ayuso wrote:
Hi Ulrich,

On Wed, Jan 02, 2013 at 04:52:44PM +0100, Ulrich Weber wrote:
correct parsing of IPv6 port NAT without address NAT
and also print brackets for port only IPv6 NAT.
I think we can go further with some extra sanity checkings, something
like:

parse_to(...)
[...]
         start = strchr(arg, '[');
         if (start == NULL)
                 xtables_error(PARAMETER_PROBLEM,
                               "IPv6 address has to be enclosed in brackets");

That will force the use of [] and might break existing scripts.
Lets try another way and relax the parsing,
by assuming one colon as port only information.

Will send another patch...

Cheers
Ulrich

--
Ulrich Weber | ulrich.weber@xxxxxxxxxx | Senior Software Engineer
Astaro - a Sophos company | Amalienbadstr 41 | 76227 Karlsruhe | Germany
Phone +49-721-25516-0 | Fax –200 | www.astaro.com

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux