New: ip6tables-nft build does not include MASQUERADE target options
https://bugs.busybox.net/show_bug.cgi?id=13971
Bug ID: 13971
Summary: ip6tables-nft build does not include MASQUERADE target
options
Product: buildroot
Version: 2021.02.3
Hardware: All
OS: Linux
Status: NEW
Severity: normal
Priority: P5
Component: Other
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]Target Milestone: ---
I added the bug into the attached file because I was having trouble to explain the bug in the Description field
--- Comment #1 from Thomas Petazzoni <[email protected]> --- *** Bug 13936 has been marked as a duplicate of this bug. ***
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
https://bugs.busybox.net/show_bug.cgi?id=13971
--- Comment #2 from Thomas Petazzoni <[email protected]> --- *** Bug 13941 has been marked as a duplicate of this bug. ***
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
In reply to [email protected]https://bugs.busybox.net/show_bug.cgi?id=13971
--- Comment #3 from Thomas Petazzoni <[email protected]> --- *** Bug 13946 has been marked as a duplicate of this bug. ***
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
In reply to [email protected]https://bugs.busybox.net/show_bug.cgi?id=13971
--- Comment #4 from Thomas Petazzoni <[email protected]> --- *** Bug 13951 has been marked as a duplicate of this bug. ***
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
In reply to [email protected]https://bugs.busybox.net/show_bug.cgi?id=13971
--- Comment #5 from Thomas Petazzoni <[email protected]> --- *** Bug 13956 has been marked as a duplicate of this bug. ***
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
In reply to [email protected]https://bugs.busybox.net/show_bug.cgi?id=13971
--- Comment #6 from Thomas Petazzoni <[email protected]> --- *** Bug 13961 has been marked as a duplicate of this bug. ***
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
In reply to [email protected]https://bugs.busybox.net/show_bug.cgi?id=13971
--- Comment #7 from Thomas Petazzoni <[email protected]> --- *** Bug 13966 has been marked as a duplicate of this bug. ***
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
In reply to [email protected]https://bugs.busybox.net/show_bug.cgi?id=13971
--- Comment #8 from Andrei Gherghescu <[email protected]> --- (In reply to mbuil from comment #0)
Can you provide the linux kernel config and a board config you used for this? I could try to reproduce, but I don't know what exactly your configuration was.
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
In reply to [email protected]https://bugs.busybox.net/show_bug.cgi?id=13971
--- Comment #9 from Peter Seiderer <[email protected]> --- Re-add bug description from one of the duplicates:
Quoted 22 lines
From [email protected] 2021-07-08 15:27:37 UTC
Since 1.6, iptables supports the MASQUERADE target options:
MASQUERADE target options:
--to-ports <port>[-<port>]
Port (range) to map to.
--random
Randomize source port.
--random-fully
Fully randomize source port.When building iptables-nft, the MASQUERADE target options are included in the iptables-nft binary, however, they are not in the ip6tables-nft:
$> sudo ./output/target/usr/sbin/iptables-nft -A POSTROUTING -s 10.244.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE --help | grep random
--random
--random-fully
Fully randomize source port.
$> sudo ./output/target/usr/sbin/ip6tables-nft -A POSTROUTING -s 10.244.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE --help | grep random $>Those targets come from the files
libipt_MASQUERADE.candlibip6t_MASQUERADE.cin https://git.netfilter.org/iptables/tree/extensions but for some reason the ip6 one does not get included in the binary
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
In reply to [email protected]https://bugs.busybox.net/show_bug.cgi?id=13971
--- Comment #10 from Peter Seiderer <[email protected]> --- (In reply to Peter Seiderer from comment #9)
Not reproducible here (raspberrypi0w_defconfig with glibc, gcc-11.x, eudev):
$ ip6tables-nft -A POSTROUTING -s 10.244.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE
--help
ip6tables v1.8.7
[...]
MASQUERADE target options:
--to-ports <port>[-<port>]
Port (range) to map to.
--random
Randomize source port.
--random-fully
Fully randomize source port.Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
[Buildroot] [Bug 13971] ip6tables-nft build does not include MASQUERADE target options
In reply to [email protected]https://bugs.busybox.net/show_bug.cgi?id=13971
[email protected] changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Status|NEW |RESOLVED--- Comment #11 from [email protected] ---
Hey, thanks! A colleague of mine fixed this some months ago.
Signature · 6 lines
You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot