diff options
| author | jk7744.park <jk7744.park@samsung.com> | 2015-09-08 21:56:24 +0900 |
|---|---|---|
| committer | jk7744.park <jk7744.park@samsung.com> | 2015-09-08 21:56:24 +0900 |
| commit | 427e21006a01f98c92434008442bba504c9d2e6c (patch) | |
| tree | 8d3cdcc6e535016586023d74b9816ef339ddb31f /extensions/libip6t_DNPT.man | |
| parent | f5589e19420a83ca978348cbcfbc4c83b310bd3b (diff) | |
| download | iptables-427e21006a01f98c92434008442bba504c9d2e6c.tar.gz iptables-427e21006a01f98c92434008442bba504c9d2e6c.tar.bz2 iptables-427e21006a01f98c92434008442bba504c9d2e6c.zip | |
tizen 2.3.1 releasetizen_2.3.1_releasesubmit/tizen_2.3.1/20150915.074541tizen_2.3.1
Diffstat (limited to 'extensions/libip6t_DNPT.man')
| -rw-r--r-- | extensions/libip6t_DNPT.man | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/extensions/libip6t_DNPT.man b/extensions/libip6t_DNPT.man new file mode 100644 index 0000000..61beeee --- /dev/null +++ b/extensions/libip6t_DNPT.man @@ -0,0 +1,30 @@ +Provides stateless destination IPv6-to-IPv6 Network Prefix Translation (as +described by RFC 6296). +.PP +You have to use this target in the +.B mangle +table, not in the +.B nat +table. It takes the following options: +.TP +\fB\-\-src\-pfx\fP [\fIprefix/\fP\fIlength] +Set source prefix that you want to translate and length +.TP +\fB\-\-dst\-pfx\fP [\fIprefix/\fP\fIlength] +Set destination prefix that you want to use in the translation and length +.PP +You have to use the SNPT target to undo the translation. Example: +.IP +ip6tables \-t mangle \-I POSTROUTING \-s fd00::/64 \! \-o vboxnet0 +\-j SNPT \-\-src-pfx fd00::/64 \-\-dst-pfx 2001:e20:2000:40f::/64 +.IP +ip6tables \-t mangle \-I PREROUTING \-i wlan0 \-d 2001:e20:2000:40f::/64 +\-j DNPT \-\-src-pfx 2001:e20:2000:40f::/64 \-\-dst-pfx fd00::/64 +.PP +You may need to enable IPv6 neighbor proxy: +.IP +sysctl -w net.ipv6.conf.all.proxy_ndp=1 +.PP +You also have to use the +.B NOTRACK +target to disable connection tracking for translated flows. |