Hi Dave: This line in net/ipv4/Makefile was left behind when the rest of the dumb NAT option was taken out. Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Cheers, -- Visit Openswan at http:/
Geez, I missed that we killed static NAT too. Whats wrong with it? I know at least two users of this - did we ask or is posting on netdev == ask? cheers, jamal
It's gone until someone fixes it up into working condition once more. It's been broken ever since the first bits of IPSEC dst cache infrastructure went in. The old code is in the source history if an
yes and no. From a functionality point of view: yes. From a performance point of view, there are applications for really dumb static NAT where you don't want to pull all the dependencies from ip_conn
Well the problem is nobody is stepping forward to fix it. It was removed not because it was redundant, but because it was broken. Until someone actually fixes it, it can't go back in. Cheers, -- Visi
I fully understand this, and I support that decision. Independent of this, I just wanted to note that if there was working and compatible code, it had it's use for high performance static nat applica