Jan Engelhardt ad86e1f27a netfilter: xt_connlimit: pick right dstaddr in NAT scenario
xt_connlimit normally records the "original" tuples in a hashlist
(such as "1.2.3.4 -> 5.6.7.8"), and looks in this list for iph->daddr
when counting.

When the user however uses DNAT in PREROUTING, looking for
iph->daddr -- which is now 192.168.9.10 -- will not match. Thus in
daddr mode, we need to record the reverse direction tuple
("192.168.9.10 -> 1.2.3.4") instead. In the reverse tuple, the dst
addr is on the src side, which is convenient, as count_them still uses
&conn->tuple.src.u3.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
2011-01-26 13:01:39 +01:00
..
2010-10-25 13:09:44 -07:00
2011-01-06 11:16:54 -08:00
2011-01-12 19:00:40 -08:00
2010-10-21 15:44:13 +02:00
2010-09-23 14:33:39 -07:00
2010-12-19 21:59:35 -08:00
2010-04-20 16:37:13 -07:00
2011-01-10 13:33:17 -08:00
2010-11-15 13:24:06 -05:00
2010-12-16 13:44:24 -08:00
2010-10-15 15:53:27 +02:00