git: kernel - Fix pf-based NAT

Matthew Dillon dillon at crater.dragonflybsd.org
Fri Jun 27 18:05:22 PDT 2014


commit 32e6d213123a90463d92ffe47f4afa150d4af50a
Author: Matthew Dillon <dillon at apollo.backplane.com>
Date:   Fri Jun 27 18:02:26 2014 -0700

    kernel - Fix pf-based NAT
    
    * Concurrency work on PF broke NAT.  Fix NAT for IPV4 TCP.
    
    * This is not a complete fix, the NAT must be able to select from a range
      of local ports to replace sport to properly map the NAT onto the same
      cpu that the originating packet was forwarded to.
    
    * Not fixed for UDP yet.

Summary of changes:
 sys/net/pf/pf.c       | 69 +++++++++++++++++++++++++++++++++++++++++----------
 sys/net/pf/pf_ioctl.c |  1 -
 2 files changed, 56 insertions(+), 14 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/32e6d213123a90463d92ffe47f4afa150d4af50a


-- 
DragonFly BSD source repository



More information about the Commits mailing list