Hi again,
when using tproxy, all outgoing connections are redirected to the proxy
application. This proxy accepts the connection. After the connection is
established, the proxy get get the real target with getsockopt. Now it
connects to the real target by itself.
What happends, if the target rejects the connection, is unreachable or has
other problems? The 3way connection handshake between client and proxy is
already established and the client must think, that the connection is
established with the real target, as tproxy is transparent.
The only way I see is to close the connection so the client will get a
"connection closed by foreign host". They cannot distinct between different
connection problems. Not very nice!? Maybe some applications will have
problems with this behaviour?
Nice day,
Jan Tegtmeier