ae
05949f8eec
Sync ng_nat with recent (r222806) ipfw_nat changes:
...
Make a behaviour of the libalias based in-kernel NAT a bit closer to
how natd(8) does work. natd(8) drops packets only when libalias returns
PKT_ALIAS_IGNORED and "deny_incoming" option is set, but ipfw_nat
always did drop packets that were not aliased, even if they should
not be aliased and just are going through.
Also add SCTP support: mark response packets to skip firewall processing.
MFC after: 1 month
2011-06-07 06:48:42 +00:00
glebius
53a0fd8ac3
LibAliasInit() should allocate memory with M_WAITOK flag. Modify it
...
and its callers.
2011-04-18 20:07:08 +00:00
glebius
6c78a88c3b
Node constructor methods are supposed to be called in syscall
...
context always. Convert nodes to consistently use M_WAITOK flag
for memory allocation.
Reviewed by: julian
2011-04-18 09:12:27 +00:00
des
66f807ed8b
Retire the MALLOC and FREE macros. They are an abomination unto style(9).
...
MFC after: 3 months
2008-10-23 15:53:51 +00:00
mav
4d5dd96154
Pass really available buffer size to libalias instead of MCLBYTES constant.
...
MCLBYTES constant were used with believe that m_megapullup() always moves
date into a fresh cluster that may become not so.
2008-06-01 15:13:32 +00:00
mav
354de8687f
Add support for the libalias redirect functionality.
...
Submitted by: Vadim Goncharov <vadim_nuclight@mail.ru>
2008-03-01 17:14:02 +00:00
mav
e8130fb9e7
Add support for setmode and settarget messages.
...
Approved by: glebius (mentor)
2007-05-22 12:23:39 +00:00
mav
519a3dd7a9
Allow node to bypass traffic while no alias address defined.
...
Approved by: glebius (mentor)
2007-05-22 12:14:43 +00:00
glebius
692ad8aa69
Return value PKT_ALIAS_FOUND_HEADER_FRAGMENT isn't an error case. The
...
packet shouldn't be dropped.
Submitted by: Alexander Motin <mav alkar.net>
2006-12-21 10:26:01 +00:00
glebius
a6aa94d334
Correctly calculate length of IP header.
...
Submitted by: Eugene Hartmann <eugene tpsb.com.ru>
2006-12-12 12:35:06 +00:00
piso
e2023fe5e9
Remove m_megapullup from ng_nat and put it under libalias.
...
Approved by: gleb
2006-12-01 16:27:11 +00:00
glebius
da25bed089
Fix result of some mechanical change that I did some time ago, when
...
writing this node.
2006-10-13 09:11:12 +00:00
glebius
9c25e36cc6
- After LibAlias processing check for TCP packet with th_x2 field
...
set. If found, then recalculate its checksum.
- Remove debugging printfs.
- Slightly rearrange code in ng_nat_rcvdata().
Approved by: re (scottl)
2005-06-27 07:39:13 +00:00
glebius
2a3560b50e
Move assertion below initializer.
...
Submitted by: Noritoshi Demizu
Pointy hat to: glebius
2005-05-11 08:28:09 +00:00
glebius
0703a04234
- Assert that mbuf length equals packet length.
...
- Tell libalias, that we have MCLBYTES to play with.
- Obtain length of data in mbuf from updated IP header.
2005-05-10 14:19:10 +00:00
glebius
8ff6ea60ca
ng_nat - a netgraph(4) node, which does NAT
2005-05-05 23:41:21 +00:00
