netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

remove outdated ip6tables TODOs

Browse Source 
IPv6 SO_ORIGINAL_DST is supported, and the flag check as-written will detect
when other flags are needed.

Fixes #3549.

PiperOrigin-RevId: 380059115
This commit is contained in:
Kevin Krakauer
2021-06-17 15:31:31 -07:00
committed by gVisor bot
parent 3cf1644a3b
commit bc27a99185
2 changed files with 0 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/abi/linux/netfilter_ipv6.go
-1
View File
@@ -41,7 +41,6 @@ const (
// IP6T_ORIGINAL_DST is the ip6tables SOL_IPV6 socket option. Corresponds to
// the value in include/uapi/linux/netfilter_ipv6/ip6_tables.h.
// TODO(gvisor.dev/issue/3549): Support IPv6 original destination.
const IP6T_ORIGINAL_DST = 80
// IP6TReplace is the argument for the IP6T_SO_SET_REPLACE sockopt. It
pkg/sentry/socket/netfilter/targets.go
-1
View File
@@ -418,7 +418,6 @@ func (*nfNATTargetMaker) unmarshal(buf []byte, filter stack.IPHeaderFilter) (tar
return nil, syserr.ErrInvalidArgument
}
// TODO(gvisor.dev/issue/3549): Check for other flags.
// For now, redirect target only supports destination change.
if natRange.Flags != linux.NF_NAT_RANGE_PROTO_SPECIFIED {
nflog("nfNATTargetMaker: invalid range flags %d", natRange.Flags)