March 2007 - tproxy - lists.balabit.hu

cttproxy question: what is ip_tproxy_confirmed () for ?
by Sergei Lavrov 23 Mar '07

23 Mar '07

What is the following function for ? static void ip_tproxy_confirmed(struct ip_conntrack *ct) { struct ip_tproxy_sockref *sr = (struct ip_tproxy_sockref *)ct->tproxy.sockref; /* check if it was marked by tproxy and not yet a related sockref */ if (test_bit(IPS_TPROXY_BIT, &ct->status) && !test_bit(IPS_TPROXY_RELATED_BIT, &ct->status) && sr) { ct->tproxy.sockref = NULL; /* put it on the sockref's related list */ if (sr->proto == IPPROTO_UDP) ip_tproxy_relatedct_add(sr, ct); /* drop reference to sockref */ ip_tproxy_sockref_unref(sr); } } ____________________________________________________________________________________ Get your own web address. Have a HUGE year through Yahoo! Small Business. http://smallbusiness.yahoo.com/domains/?p=BESTDEAL

1 0

Issue configuring 2.6.20 kernel with tproxy 2.0.6
by Pranav Desai 14 Mar '07

14 Mar '07

Hello All, I am trying to patch the 2.6.20 kernel with the patches in cttproxy-2.6.20-2.0.6.tar.gz. But it doesnt show up in 'make menuconfig'. Can someone point me to where it should show up and if there is any other way to configure tproxy into my kernel i.e. without using make menuconfig. Thanks -- Pranav

4 5

Patching iptables via apt-build
by Matt Miller 01 Mar '07

01 Mar '07

Under debian etch I'm trying to patch iptables using the debian tool apt-build. I'm using the "--patch" option of apt-build to get the tproxy patch included, and it looks like the source tree is being patched. The problem at this point seems to be that the resulting .deb package doesn't know that the new libipt_TPROXY.so library is supposed to be part of the package after the patch. I haven't yet tried to just get the iptables source from netfilter.org and patch the standard tree, because I'd really prefer to stay in the debian world to do all this. Can anyone provide instructions or hints for easily building a .deb of iptables that includes the tproxy patch? I'm not necessarily committed to using apt-build, but that tool's "--patch" option did seem to be the easiest approach. I am open to other approaches.

2 4