commit | 9f593653742d1dd816c4e94c6e5154a57ccba6d1 | [log] [tgz] |
---|---|---|
author | Stephen Hemminger <shemminger@vyatta.com> | Mon Aug 18 21:32:32 2008 -0700 |
committer | David S. Miller <davem@davemloft.net> | Mon Aug 18 21:32:32 2008 -0700 |
tree | 1e71181cc80da8dc3d6e1da202943482b9eb5500 | |
parent | fab00c5d15091546be681426c60b2ed2c10513bf [diff] |
nf_nat: use secure_ipv4_port_ephemeral() for NAT port randomization Use incoming network tuple as seed for NAT port randomization. This avoids concerns of leaking net_random() bits, and also gives better port distribution. Don't have NAT server, compile tested only. Signed-off-by: Stephen Hemminger <shemminger@vyatta.com> [ added missing EXPORT_SYMBOL_GPL ] Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>