April 2011 - tproxy - lists.balabit.hu

sctp module patch
by maria isabel 23 Apr '11

23 Apr '11

Hello, I have attached the sctp patch with the steal socket implementation.But I have one problem and I need your help.With this change the packet gets redirected to the TPROXY port but when it reaches the sctp module it gets dropped and an ABORT chunk is issued.What could be the reason?This does not happen in tcp and udp.Normal sctp flow is proper on other ports apart from the TPROXY port.I am able to see this trace. * * *redirecting: proto 132 0aff0d9a:1500 -> 00000000:3127, mark: 1* ** My rule is iptables -t mangle -A PREROUTING -p sctp --dport 1500 -j TPROXY --on-port 3127. Inside the sctp module when the packet is redirected the association lookup is done with port 1500 and not 3127. I think the local address is initialised that way or something.Please help me!! Regards, Maria

2 1

Sample/test code
by Sumedh Sathaye 23 Apr '11

23 Apr '11

Hello, I am a new user of TPROXY, and wonder if there is an answer to this question already. Is there a sample piece of proxy (user process) code that I can look at to quickly understand how to write such a proxy? I looked at squid, stunnel etc. codes, but deciphering those is harder than I thought. Netcat version mismatch is another story altogether. Can anyone point to sample transparent proxy code that uses the TPROXY feature? If it does not exist, then I think it should be created :-) Sumedh

2 1

Tproxy with mikrotik
by faresacmp farescamp 22 Apr '11

22 Apr '11

Hi, I ran Tproxy and and i have a mikrotik as a router ,I wanto redirect all of my lan traffice to Tproxy squid,i have mark packet all of lan traffic and route this marked packets to the squid tproxy but that's not worked for me ,can anyone help me? LAN---MIKROTIK---INTERNET | SQUID[TPROXY] Majid Mohsen Beigi.

1 0