Hi people,
My network daemon program can't receive any packet from iptables's REDIRECT
after patching cttproxy-2.6.12-2.0.2.tar.gz.
Of course, I checked it out that REDIRECT worked before patching in the
same-kernel.
(So, I tried it in Fedora kernel(2.6.12-1.1376_FC3). It was worse. The
system was halting without any message.)
<<My system configuration>>
Linux-kernel version : 2.6.12 original (no warning, no error when patching)
Gcc version : gcc (GCC) 3.4.4 20050721 (Red Hat 3.4.4-2)
Modules :
Module Size Used by
ipt_REDIRECT 2688 1
ipt_physdev 2832 1
iptable_filter 3584 0
iptable_tproxy 19780 0
iptable_nat 27976 3 ipt_REDIRECT,iptable_tproxy
ip_conntrack 44040 2 iptable_tproxy,iptable_nat
ipt_TPROXY 2688 0
ip_tables 24448 6
ipt_REDIRECT,ipt_physdev,iptable_filter,iptable_tproxy,iptable_nat,ipt_TPROX
Y
video 16388 0
Device Network state : Bridge
bridge name bridge id STP enabled interfaces
br0 8000.00d06809c827 no eth3
eth1
IP table Rule : (iptables -m physdev -t nat -A PREROUTING --physdev-in eth1
-d A.B.C.D -p tcp --dport 80 -j REDIRECT --to-port 2101)
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
REDIRECT tcp -- anywhere A.B.C.D PHYSDEV match
--physdev-in eth1 tcp dpt:http redir ports 2101
CPU info: 2 x Intel(R) Xeon(TM) CPU 3.00GHz (Hiper-Threading : On)
netstat info: (telnet A.B.C.D 80)
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address
State
tcp 0 0 192.168.0.107:2101 192.168.0.101:1147
SYN_RECV
Thanks, in advance.