Hi there,
while using PPP/dial-on-demand together with IP_MASQ, I was annoyed by the
link being established with a local address different from the one kept in
the masquerading entry (which matched the previous link address). So I've
implemented the IP_MASQ_CMD_FLUSH command for the target IP_MASQ_TARGET_CORE.
This allows to quickly flush all masquerading entries.
Here is the patch against 2.2.14. It slightly modifies net/ipv4/ip_masq.c and
adds an example program in Documentation/networking/ip_masq. The scripts ip-up
and ip-down on my firewall box now call it and I now have a true dial-on-demand.
It works correctly, and I'm sending this mail using it.
For those who can't extract the patch from this mail, it's available at :
http://www-miaif.lip6.fr/willy/pub/linux-patches/patch-2.2.14-masqflush.gz
Happy dialing :-)
Willy Tarreau
--%--multipart-mixed-boundary-1.19180.947366735--%
Content-Type: application/octet-stream
Content-Transfer-Encoding: base64
Content-Description: gzip compressed data, deflated, original filename, last modified: Sat Jan 8 21:55:36 2000, max compression, os: Unix
Content-Disposition: attachment; filename="patch-2.2.14-masqflush.gz"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--%--multipart-mixed-boundary-1.19180.947366735--%--
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/