Revision 31202953
Added by Chris Buechler almost 12 years ago
| etc/inc/filter.inc | ||
|---|---|---|
| 1341 | 1341 |
$protocol = " proto {$proto}";
|
| 1342 | 1342 |
} else |
| 1343 | 1343 |
$protocol = ""; |
| 1344 |
/* Set tgt for IPv6 */ |
|
| 1345 |
if ($proto == "ipv6") {
|
|
| 1346 |
$natip = get_interface_ipv6($if); |
|
| 1347 |
if(is_ipaddrv6($natip)) |
|
| 1348 |
$tgt = "{$natip}/128";
|
|
| 1349 |
} |
|
| 1344 | 1350 |
/* Add the hard set source port (useful for ISAKMP) */ |
| 1345 | 1351 |
if($natport != "") |
| 1346 | 1352 |
$tgt .= " port {$natport}";
|
Also available in: Unified diff
Fix selection of IPv6 target IP for IPv6 Outbound NAT rules.
This makes it possible (without source hacking) to do many:1 NAT of IPv6.
Some will rejoice. Some will curse.
This should really only be done in limited, specific circumstances. Don't develop the IPv4 NAT mentality with IPv6.