netfilter: nfnetlink_hook: Dump nat type chains

Browse source

These chains are indirectly attached to the hook since they are
not called for packets belonging to an established connection.

Introduce NF_HOOK_OP_NAT to identify the container and dump attached
entries instead of the container itself.

Dump these entries with the dispatcher's priority value since their own
priority merely defines ordering within the dispatcher's list.

Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Florian Westphal <fw@strlen.de>

...

This commit is contained in:

Phil Sutter 2026-03-20 16:19:39 +01:00 • committed by Florian Westphal

parent b8ea7da314

commit b010e2a4a9

4 changed files with 48 additions and 10 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

7

include/linux/netfilter.h

View file

6

net/netfilter/nf_nat_core.c

View file

8

net/netfilter/nf_nat_proto.c

View file

37

net/netfilter/nfnetlink_hook.c

View file