patchpanel: enable conntrack helpers on ARC start.
PPTP clients use GRE protocol to carry packets to the server. ARC
provides a PPTP client as legacy VPN, thus requires GRE to be
transmitted correctly through the NAT which is not possible without
conntrack helpers. This CL enables conntrack helpers when ARC is started
and disable them on ARC stop.
BUG=b:172214190
TEST="configure a PPTP VPN in ARC;
ensure it connects successfully."
Change-Id: I3ccd41fb7eaa55beac73f86529a67aaa91a87861
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/2912093
Tested-by: Damien Dejean <damiendejean@google.com>
Reviewed-by: Hugo Benichi <hugobenichi@google.com>
Reviewed-by: Garrick Evans <garrick@chromium.org>
Commit-Queue: Damien Dejean <damiendejean@google.com>
(cherry picked from commit 40e1598dbb523efcfd6ddfcd59a90570f05ab9f0)
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/2919689
diff --git a/patchpanel/datapath.h b/patchpanel/datapath.h
index 7babb95..53e5a0e 100644
--- a/patchpanel/datapath.h
+++ b/patchpanel/datapath.h
@@ -261,6 +261,9 @@
virtual bool AddAdbPortAccessRule(const std::string& ifname);
virtual void DeleteAdbPortAccessRule(const std::string& ifname);
+ // Enables or disables netfilter conntrack helpers.
+ virtual bool SetConntrackHelpers(bool enable_helpers);
+
// Create (or delete) DNAT rules for redirecting DNS queries from system
// services to the nameservers of a particular physical networks. These
// DNAT rules are only applied if a VPN is connected and allows system