diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-05-22 21:31:32 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2024-05-22 21:33:06 +0200 |
| commit | 7fe568ca1672f1dfbd2b56ee3ef7a6ab48b03070 (patch) | |
| tree | 6c20a009f5f64fc7d71c8290eac2f7330291630f /op-mode-definitions/conntrack-sync.xml.in | |
| parent | 252ae4b0b9519c97164e8901ce192e104827102d (diff) | |
| download | vyos-1x-7fe568ca1672f1dfbd2b56ee3ef7a6ab48b03070.tar.gz vyos-1x-7fe568ca1672f1dfbd2b56ee3ef7a6ab48b03070.zip | |
nat: T6345: source NAT port mapping "fully-random" is superfluous in Kernel >=5.0
random - In kernel 5.0 and newer this is the same as fully-random. In earlier
kernels the port mapping will be randomized using a seeded MD5 hash mix using
source and destination address and destination port.
https://git.netfilter.org/nftables/commit/?id=fbe27464dee4588d906492749251454
Diffstat (limited to 'op-mode-definitions/conntrack-sync.xml.in')
0 files changed, 0 insertions, 0 deletions