[PATCH] IPv4 NAT ported to nf_conntrack

Yasuyuki KOZAKAI yasuyuki.kozakai at toshiba.co.jp
Tue Oct 31 09:43:59 CET 2006


From: Jozsef Kadlecsik <kadlec at blackhole.kfki.hu>
Date: Mon, 30 Oct 2006 13:25:37 +0100 (CET)

> Hi,
> 
> Attached is a patch which implements IPv4 NAT over nf_conntrack by
> straightforward porting of the original NAT code.

Wow great. I'll review that this weekend.

> As you will notice, in order to avoid circular dependency a boolean choice 
> between NF_CONNTRACK and IP_CONNTRACK is added to net/netfilter/Kconfig. 
> Ugly it is, but unfortunately the kconfig language is not rich enough and 
> an additional option is required to choose between modular/non-modular.

I've not read the patch yet, but I don't feel so ugly. A config to choose
NF_CONNTRACK or IP_CONNTRACK represents current our intension
straightforward.

BTW, Harald has works/ideas on this area IIRC. But I cannot find such codes
in his git tree.

-- Yasuyuki Kozakai



More information about the netfilter-devel mailing list