From bc27a991851fdffa59f028eecfc22bdd17ccaa55 Mon Sep 17 00:00:00 2001 From: Kevin Krakauer Date: Thu, 17 Jun 2021 15:28:51 -0700 Subject: remove outdated ip6tables TODOs IPv6 SO_ORIGINAL_DST is supported, and the flag check as-written will detect when other flags are needed. Fixes #3549. PiperOrigin-RevId: 380059115 --- pkg/sentry/socket/netfilter/targets.go | 1 - 1 file changed, 1 deletion(-) (limited to 'pkg/sentry/socket') diff --git a/pkg/sentry/socket/netfilter/targets.go b/pkg/sentry/socket/netfilter/targets.go index 7d83e708f..ea56f39c1 100644 --- a/pkg/sentry/socket/netfilter/targets.go +++ b/pkg/sentry/socket/netfilter/targets.go @@ -418,7 +418,6 @@ func (*nfNATTargetMaker) unmarshal(buf []byte, filter stack.IPHeaderFilter) (tar return nil, syserr.ErrInvalidArgument } - // TODO(gvisor.dev/issue/3549): Check for other flags. // For now, redirect target only supports destination change. if natRange.Flags != linux.NF_NAT_RANGE_PROTO_SPECIFIED { nflog("nfNATTargetMaker: invalid range flags %d", natRange.Flags) -- cgit v1.2.3