npf icon indicating copy to clipboard operation
npf copied to clipboard

Exporting does not handle associated ALGs and rule procedures

Open rmind opened this issue 5 years ago • 0 comments
trafficstars

Configuration exporting (npfctl save) does not capture the following:

  • ALG and its state associated with the NAT entry (see npf_nat_export()).
  • Rule procedure calls and parameters (see npf_rprocset_export()).

The former needs some refactoring: NAT entry should probably use ALG IDs and the ALG API should be extended to support exporting/importing of the custom ALG data. The rule procedure API needs to be similarly extened.

rmind avatar May 21 '20 15:05 rmind