tree 21f637d3047580ea76617af38e6fad82c9d7a5c0
parent e8cbd65dcef62333b5e461cb264c844065b33e9a
author Pablo Neira Ayuso <pablo@netfilter.org> 1381222239 +0200
committer Pablo Neira Ayuso <pablo@netfilter.org> 1388443851 +0100

xtables: fix missing ipt_entry for MASQUERADE target

The MASQUERADE target relies on the ipt_entry information that is
set in ->post_parse, which is too late.

Add a new hook called ->pre_parse, that sets the protocol
information accordingly.

Thus:

	xtables -4 -A POSTROUTING -t nat -p tcp \
		-j MASQUERADE --to-ports 1024

works again.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>