From d1edabdca016b9d80295855a3ce6d2816486d65c Mon Sep 17 00:00:00 2001
From: Toshi Kikuchi <toshik@google.com>
Date: Fri, 9 Apr 2021 21:09:47 -0700
Subject: iptables: support postrouting hook and SNAT target

The current SNAT implementation has several limitations:
- SNAT source port has to be specified. It is not optional.
- SNAT source port range is not supported.
- SNAT for UDP is a one-way translation. No response packets
  are handled (because conntrack doesn't support UDP currently).
- SNAT and REDIRECT can't work on the same connection.

Fixes #5489

PiperOrigin-RevId: 367750325
---
 pkg/tcpip/stack/BUILD | 1 +
 1 file changed, 1 insertion(+)

(limited to 'pkg/tcpip/stack/BUILD')

diff --git a/pkg/tcpip/stack/BUILD b/pkg/tcpip/stack/BUILD
index 49362333a..bbd75c73a 100644
--- a/pkg/tcpip/stack/BUILD
+++ b/pkg/tcpip/stack/BUILD
@@ -45,6 +45,7 @@ go_library(
         "addressable_endpoint_state.go",
         "conntrack.go",
         "headertype_string.go",
+        "hook_string.go",
         "icmp_rate_limit.go",
         "iptables.go",
         "iptables_state.go",
-- 
cgit v1.2.3