<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=ks_c_5601-1987" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.18852">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2>Hello everyone and Balazs Scheidler ~</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>i have one problem, i recently made up the testbed like
below to run the tproxy patched apache proxy,</FONT></DIV>
<DIV><FONT size=2>so i applied all iptables and routing rules with reading
the readme
file [http://www.balabit.com/downloads/files/tproxy/README.txt]</FONT></DIV>
<DIV><FONT size=2>but when the client tried to connect the web
server, the packets reached to the box but my tproxy server could not
receive any corresponding packet from clients</FONT></DIV>
<DIV><FONT size=2>i want to know why my proxy server can't receive any
packet</FONT></DIV>
<DIV><FONT size=2>do i need some DNAT rules ?</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2><STRONG>testbed:</STRONG></FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>[client ] <---------> [tproxy patched apache mod_proxy]
<--------> [web server]</FONT></DIV>
<DIV><FONT
size=2>
---------------------------</FONT></DIV>
<DIV><FONT
size=2>
proxybox</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>[proxybox]</FONT></DIV>
<DIV><FONT size=2> 1. OS: linux 2.6.31.6 vanilla
kernel</FONT></DIV>
<DIV><FONT size=2> 2. iptables: 1.4.5 , no tproxy patched
</FONT></DIV>
<DIV><FONT size=2> 3. proxy: tproxy patched [
please refer to the httpd-2.2.9-tproxy.patch ] APACHE 2.2.9</FONT></DIV>
<DIV><FONT size=2> 4. iptables and routing rules</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2> iptables -t mangle
-A PREROUTING -p tcp --dport 80 -j TPROXY --on-port 3128 --tproxy-mark
0x1/0x1</FONT></DIV>
<DIV><FONT size=2><BR> ip rule add
fwmark 1 lookup 100<BR> ip route add
local 0.0.0.0/0 dev lo table 100</DIV>
<DIV> </DIV>
<DIV> iptables -t mangle -N
DIVERT<BR> iptables -t mangle -A
PREROUTING -p tcp -m socket -j
DIVERT<BR> iptables -t mangle -A
DIVERT -j MARK --set-xmark
0x1/0xffffffff<BR> iptables -t mangle
-A DIVERT -j ACCEPT<BR></FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2> </FONT></DIV>
<DIV><FONT size=2></FONT> </DIV></BODY></HTML>