commit | 4b7a4afaa240e5d2039e612e125b045d5d1cb7fa | [log] [tgz] |
---|---|---|
author | Pablo Neira Ayuso <pablo@netfilter.org> | Tue Oct 08 10:50:39 2013 +0200 |
committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Dec 30 23:50:51 2013 +0100 |
tree | 21f637d3047580ea76617af38e6fad82c9d7a5c0 | |
parent | e8cbd65dcef62333b5e461cb264c844065b33e9a [diff] |
xtables: fix missing ipt_entry for MASQUERADE target The MASQUERADE target relies on the ipt_entry information that is set in ->post_parse, which is too late. Add a new hook called ->pre_parse, that sets the protocol information accordingly. Thus: xtables -4 -A POSTROUTING -t nat -p tcp \ -j MASQUERADE --to-ports 1024 works again. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>