Files
linux/include/net
Pablo Neira Ayuso 7210e4e38f netfilter: nf_tables: restrict nat/masq expressions to nat chain type
This adds the missing validation code to avoid the use of nat/masq from
non-nat chains. The validation assumes two possible configuration
scenarios:

1) Use of nat from base chain that is not of nat type. Reject this
   configuration from the nft_*_init() path of the expression.

2) Use of nat from non-base chain. In this case, we have to wait until
   the non-base chain is referenced by at least one base chain via
   jump/goto. This is resolved from the nft_*_validate() path which is
   called from nf_tables_check_loops().

The user gets an -EOPNOTSUPP in both cases.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2014-10-13 20:42:00 +02:00
..
2014-07-30 19:28:41 +02:00
2014-09-18 10:54:36 +02:00
2013-12-28 17:02:46 -05:00
2014-09-26 16:14:16 -04:00
2012-07-19 10:43:03 -07:00
2013-11-07 19:28:58 -05:00
2014-09-30 01:02:26 -04:00
2014-06-04 22:46:38 -07:00
2013-01-27 22:46:33 -05:00
2014-10-04 20:37:17 -04:00
2014-06-27 15:53:35 -07:00
2014-09-05 17:40:33 -07:00
2014-01-03 20:56:48 -05:00
2014-09-30 14:00:48 -04:00
2014-08-15 13:51:40 +02:00
2014-03-24 12:45:01 -04:00
2014-06-02 11:00:41 -07:00
2014-05-22 14:57:15 -04:00
2014-10-01 21:35:51 -04:00
2014-07-07 21:14:21 -07:00