diff options
| author | hagbard-01 <39653662+hagbard-01@users.noreply.github.com> | 2019-01-29 15:26:38 -0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2019-01-29 15:26:38 -0800 |
| commit | 98ce64bc3c73118c8e909173da460501ca6cabf1 (patch) | |
| tree | 0aa009779956bb81afcfde439fddd97641f32bba /lib | |
| parent | 0b58083b29bff5bb4a2b16354a77a2794be7cc07 (diff) | |
| parent | 82245fbfc8c8b0c47508cb67d6a5b91b1b9ce5e1 (diff) | |
| download | vyatta-nat-98ce64bc3c73118c8e909173da460501ca6cabf1.tar.gz vyatta-nat-98ce64bc3c73118c8e909173da460501ca6cabf1.zip | |
Merge pull request #6 from mevertse/current
T166: Changed NPTv6 to use NETMAP
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/VyOS/Nptv6Rule.pm | 14 |
1 files changed, 6 insertions, 8 deletions
diff --git a/lib/VyOS/Nptv6Rule.pm b/lib/VyOS/Nptv6Rule.pm index d469020..d753e93 100644 --- a/lib/VyOS/Nptv6Rule.pm +++ b/lib/VyOS/Nptv6Rule.pm @@ -69,7 +69,7 @@ sub setup { # Make SNPT ip6tables string # POSTROUTING -# ip6tables -t mangle -I VYOS_NPT_HOOK -s inside-pfx -o outside-if -j SNPT --src-pfx inside-pfx --dst-pfx outside-pfx +# ip6tables -t nat -I VYOS_SNPT_HOOK -s inside-pfx -o outside-if -j NETMAP --to outside-pfx sub make_snpt_string { my ($self) = @_; my $snpt_str = ""; @@ -82,9 +82,8 @@ sub make_snpt_string { $snpt_str .= " -o "; $snpt_str .= $self->{_outside_if}; } - $snpt_str .= " -j SNPT --src-pfx "; - $snpt_str .= $self->{_inside_pfx}; - $snpt_str .= " --dst-pfx "; + $snpt_str .= " -j NETMAP "; + $snpt_str .= " --to "; $snpt_str .= $self->{_outside_pfx}; return $snpt_str; @@ -92,7 +91,7 @@ sub make_snpt_string { # Make DNPT ip6tables string # PREROUTING -# ip6tables -t mangle -I VYOS_NPT_HOOK -d outside-pfx -i outside-if -j DNPT --src-pfx outside-pfx --dst-pfx inside-pfx +# ip6tables -t nat -I VYOS_DNPT_HOOK -d outside-pfx -i outside-if -j NETMAP --to inside-pfx sub make_dnpt_string { my ($self) = @_; my $dnpt_str = ""; @@ -105,9 +104,8 @@ sub make_dnpt_string { $dnpt_str .= " -i "; $dnpt_str .= $self->{_outside_if}; } - $dnpt_str .= " -j DNPT --src-pfx "; - $dnpt_str .= $self->{_outside_pfx}; - $dnpt_str .= " --dst-pfx "; + $dnpt_str .= " -j NETMAP "; + $dnpt_str .= " --to "; $dnpt_str .= $self->{_inside_pfx}; return $dnpt_str; |