Hi,
On 2005. December 20. 00.08, Sai Bathina wrote:
> I am seeing that I am getting an Invalid Arguement for setsockopt for
> TPROXY_ASSIGN.
> I have tried this compiling tproxy into the kernel as well as loading
> them as modules.
First of all, sorry for the delayed answer.
Obviously, compiling into the kernel and loading as a module should
give exactly the same results.
> This is the code snippet:
>
> sock = socket(AF_INET, SOCK_STREAM, 0);
> if (sock == -1)
> {
> perror("socket");
> return -1;
> }
>
> /* check tproxy version*/
> itp.op = TPROXY_VERSION;
> itp.v.version = 0x02000000;
> if (setsockopt(sock, SOL_IP, IP_TPROXY, &itp, sizeof(itp)) == -1)
> {
> perror("setsockopt(SOL_IP, IP_TPROXY, TPROXY_VERSION)");
> return -1;
> }
>
> /* bind to local address */
> sin.sin_family = AF_INET;
> sin.sin_addr.s_addr = INADDR_ANY;
> //inet_aton(argv[1], &sin.sin_addr);
> sin.sin_port = htons(9999);
>
> if (bind(sock, (struct sockaddr *) &sin, sizeof(sin)) == -1)
> {
> perror("bind");
> return -1;
> }
>
> listen(sock, 5);
> clilen = sizeof(cli_addr);
> newsockfd = accept(sock,(struct sockaddr *) &cli_addr,&clilen);
> if (newsockfd < 0)
> error("ERROR on accept");
>
> printf("Here is the client:
> %s:%i\n",inet_ntoa(cli_addr.sin_addr.s_addr),
> ntohs(cli_addr.sin_port) );
Ok, no problems up to this point. However, the next few lines are
somewhat problematic.
> /* assign foreign address */
> itp.op = TPROXY_ASSIGN;
>
> memcpy( &itp.v.addr.faddr, &cli_addr.sin_addr, sizeof( struct
> in_addr ) );
>
> itp.v.addr.fport = cli_addr.sin_port;
>
> printf("Here is the itp vals for faddr and fport
> %s:%i\n",inet_ntoa(itp.v.addr.faddr), ntohs(itp.v.addr.fport) );
>
> if (setsockopt(sock, SOL_IP, IP_TPROXY, &itp, sizeof(itp)) == -1)
> {
> perror("setsockopt(SOL_IP, IP_TPROXY, TPROXY_ASSIGN)");
> return -1;
> }
Once you've accept()-ed the connection and have a socket, you cannot
do any assignments on the socket because it has the same local endpoint
(IP:port) as the listener socket. By the way, I don't really get what
you're trying to do, so I could probably help you more if you told us
what this piece of the program is supposed to achieve.
--
Regards,
Krisztian Kovacs