Chion82 / netfilter-full-cone-nat

A kernel module to turn MASQUERADE into full cone SNAT
GNU General Public License v2.0
427 stars 121 forks source link

对于5元组没有变化的连接,前后两次SNAT出接口变化后,CT表无法及时删除失效的跟踪连接,导致新的NAT会话失败 #19

Open tingjunli opened 5 years ago

tingjunli commented 5 years ago

本次修改是基于linux 3.18.29内核NAT实现修改的