[Buildroot] [Bug 13951] New: ip6tables nft build does not include MASQUERADE target options

[bugzilla at busybox.net]

https://bugs.busybox.net/show_bug.cgi?id=13951

            Bug ID: 13951
           Summary: ip6tables nft build does not include MASQUERADE target
                    options
           Product: buildroot
           Version: 2021.02.3
          Hardware: All
                OS: Linux
            Status: RESOLVED
          Severity: normal
          Priority: P5
         Component: Other
          Assignee: unassigned at buildroot.uclibc.org
          Reporter: mbuil at suse.com
                CC: buildroot at uclibc.org
  Target Milestone: ---
            Status: RESOLVED
        Resolution: DUPLICATE

Since 1.6, iptables supports the MASQUERADE target options:

MASQUERADE target options:
 --to-ports <port>[-<port>]
                                Port (range) to map to.
 --random
                                Randomize source port.
 --random-fully
                                Fully randomize source port.

When building iptables-nft, the MASQUERADE target options are included in the
iptables-nft binary, however, they are not in the ip6tables-nft:

sudo ./output/target/usr/sbin/iptables-nft -A POSTROUTING -s 10.244.0.0/16 ! -d
224.0.0.0/4 -j MASQUERADE --help | grep random
 --random
 --random-fully
                                Fully randomize source port.
sudo ./output/target/usr/sbin/ip6tables-nft -A POSTROUTING -s 10.244.0.0/16 !
-d 224.0.0.0/4 -j MASQUERADE --help | grep random
$>

Those targets come from the files libipt_MASQUERADE.c and libip6t_MASQUERADE.c
in https://git.netfilter.org/iptables/tree/extensions but for some reason the
ip6 one does not get included in the binary

--- Comment #1 from Thomas Petazzoni <thomas.petazzoni at bootlin.com> ---


*** This bug has been marked as a duplicate of bug 13971 ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.