Skip to contentSkip to conversation

New: ip6tables-nft build does not include MASQUERADE target options

Buildroot [email protected] 1 participant 1 message Nov 2, 2021

lore
Share & tools
lore
#0 lore raw

https://bugs.busybox.net/show_bug.cgi?id=13941

            Bug ID: 13941
           Summary: ip6tables-nft build does not include MASQUERADE target
                    options
           Product: buildroot
           Version: 2021.02.3
          Hardware: All
                OS: Linux
            Status: RESOLVED
          Severity: normal
          Priority: P5
         Component: Other
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]

Target Milestone: ---
Resolution: DUPLICATE
Status: RESOLVED

Since 1.6, iptables supports the MASQUERADE target options:

MASQUERADE target options:
--to-ports <port>[-<port>]
Port (range) to map to.
--random
Randomize source port.
--random-fully
Fully randomize source port.

When building iptables-nft, the MASQUERADE target options are included in the iptables-nft binary, however, they are not in the ip6tables-nft:

$> sudo ./output/target/usr/sbin/iptables-nft -A POSTROUTING -s 10.244.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE --help | grep random
--random
--random-fully
Fully randomize source port.
$> sudo ./output/target/usr/sbin/ip6tables-nft -A POSTROUTING -s 10.244.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE --help | grep random
$>

Those targets come from the files libipt_MASQUERADE.c and libip6t_MASQUERADE.c in https://git.netfilter.org/iptables/tree/extensions but for some reason the ip6 one does not get included in the binary

--- Comment #1 from Thomas Petazzoni <[email protected]> ---

*** This bug has been marked as a duplicate of bug 13971 ***

Signature · 6 lines
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot