- tproxy - lists.balabit.hu

Unusual/special request on tproxy patch
by Ronneil Camara 22 Mar '18

22 Mar '18

Hi, I'm debugging a linux that was built so many years ago. It's running squid. The kernel is 2.6.18 and is patched with tproxy which I believe was patched with cttproxy-2.6.18-2.0.6.tar.gz. Unfortunately, this linux server I am debugging doesn't have the kernel sources anymore. I've searched the entire web for cttproxy-2.6.18-2.0.6.tar.gz for 2 days but I have been unsuccessful finding it. I was hoping if anyone has kept a copy of this file. Thank you so much! Neil

2 1

☑Fw: journey
by Nicolas Royo 13 Jul '17

13 Jul '17

Greetings! We are planning a small journey this month and I need you to take a look at our route and tell what you think http://amontanaview.com/turn.php?7776 Speak to you later, Nicolas Royo

1 0

Fwd: Re: TProxy with UDP
by Maximilian Frank 27 Jun '17

27 Jun '17

Hi, thanks for the quick reply! Ok then i guess i will have to do it this way. The race condition should not be that much of a problem in my case as i run single threaded and pass all packets from main proxy port to the new tproxy port anyway. So i guess the only thing that could happen is that i check the origdst for multiple packets and after the first packed i only forward to my application logic and do not setup a new socket. The only real problem i might have is how to decide when to close the remote tproxy socket, but thats a application logic problem so i'll figure something out. Thanks for the help! regards, Maximilian Frank On 27/06/17 11:49, Scheidler, Balázs wrote: > Hi, > > udp_accept() was not accepted at that point, and I stopped pushing it. > right now the best option is to fetch the first packet, find our the > original sender and create a new socket with the matching local/remote > endpoints, which would receive further traffic. > > there's a race between the reception of the first packet and the > creation of the socket though. > > -- > Bazsi > > On Mon, Jun 26, 2017 at 5:54 PM, Maximilian Frank > <mail(a)frank-maximilian.at <mailto:mail@frank-maximilian.at>> wrote: > > Hi List, > > not sure if I am in the right place as tproxy is part of the > kernel now, but i am gonna as here anyway. > > I am currently building a python based transparent TCP + UDP > proxy. The setup for the proxy would be a basic mitm i.e. > > Local Net --> Tproxy Box --> Internet > > For TCP i can simply use getsockopt(SO_ORIGINAL_DST) to get > original destination address and port. This works for tproxy and > normal redirects. With UDP of course i cant do that. At the moment > i am using IP_RECVORIGDST to get the original udp destination and > port. This works fine apart from the fact that there seems to be a > bug in recent kernels disabling this sockopt. > (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/com… > <https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/com…>) > > > While researching tproxy i found this mail > (https://lists.balabit.hu/pipermail/tproxy/2008-November/000996.html > <https://lists.balabit.hu/pipermail/tproxy/2008-November/000996.html>) > in the thread archive. My question now is this udp accept part of > the kernel version of tproxy or is there a patch for it out there > for newer kernels. I ask because i feel this approach is a lot > cleaner than me manually creating a new tproxy enabled socket. So > any info/help is much appreciated. > > with kind regards, > > Maximilian Frank > > > _______________________________________________ > tproxy mailing list > tproxy(a)lists.balabit.hu <mailto:tproxy@lists.balabit.hu> > https://lists.balabit.hu/mailman/listinfo/tproxy > <https://lists.balabit.hu/mailman/listinfo/tproxy> > >

1 0

TProxy with UDP
by Maximilian Frank 26 Jun '17

26 Jun '17

Hi List, not sure if I am in the right place as tproxy is part of the kernel now, but i am gonna as here anyway. I am currently building a python based transparent TCP + UDP proxy. The setup for the proxy would be a basic mitm i.e. Local Net --> Tproxy Box --> Internet For TCP i can simply use getsockopt(SO_ORIGINAL_DST) to get original destination address and port. This works for tproxy and normal redirects. With UDP of course i cant do that. At the moment i am using IP_RECVORIGDST to get the original udp destination and port. This works fine apart from the fact that there seems to be a bug in recent kernels disabling this sockopt. (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/com…) While researching tproxy i found this mail (https://lists.balabit.hu/pipermail/tproxy/2008-November/000996.html) in the thread archive. My question now is this udp accept part of the kernel version of tproxy or is there a patch for it out there for newer kernels. I ask because i feel this approach is a lot cleaner than me manually creating a new tproxy enabled socket. So any info/help is much appreciated. with kind regards, Maximilian Frank

1 0

Fw: pleasant surprise
by Nicolas Royo 22 May '17

22 May '17

Hi friend! Have you heard the latest news? It's going to be a pleasant surprise for you, just take a look http://discount.undeadcowboy.com Nicolas Royo Sent from Mail for Windows 10

1 0

Re: [tproxy] very good news
by Nicolas Royo 06 May '17

06 May '17

Hey friend, I've got good news for you, you'll be surprised)) Please, read more about it here http://aitd.goldinvesting.tips Nicolas Royo From: tproxy [mailto:tproxy@lists.balabit.hu] Sent: Saturday, May 06, 2017 9:36 AM To: nicolasroyo(a)yahoo.com Subject: Also OP. Er, so I just edited my contest post YET AGAIN -- to request that everyone who enters should add the color/brand of the lipstain that they would like to receive. I know it might take you a while to pick which one you like best, but if you could add that to your post any time before the contest end date that would be great! I feel like such a noob, editing my Contest post 1,000,000 times, haha. Sent from Mail for Windows 10

1 0

☯Re: what an amazing surprise
by Nicolas Royo 26 Apr '17

26 Apr '17

Greetings! I've got an amazing surprise for you, you're going to love it! Just take a look here http://hncg.com.cn/test.php?3435 Cheers, Nicolas Royo From: tproxy [mailto:tproxy@lists.balabit.hu] Sent: Wednesday, April 26, 2017 3:30 PM To: nicolasroyo(a)yahoo.com Subject: WASTED To run at a 14:53 pace means that you are running at (an average) speed of 14min53sec per mile Some races have time cutoffs, meaning they end at a certain time. I'm assuming that this race is defining this cutoff. Meaning that you should hope to be running at a pace that is faster than ~15mins per mile to finish and avoid the cutoff Sent from Mail for Windows 10

1 0

last news
by Nicolas Royo 02 Apr '17

02 Apr '17

Greetings, Here are some news since we've met last time, just read them here http://www.divorcedinaday.com/horror.php?dfde Faithfully, Nicolas Royo

1 0

Re: [tproxy] I'm so excited
by Nicolas Royo 21 Mar '17

21 Mar '17

Greetings, I'm so excited to tell you the latest news, something really great has happened) Please read about it here http://good.exterminator-eastend.com/9594 In haste, Nicolas Royo

1 0

Re: [tproxy] Is the project still alive?
by Vitaly Repin 14 Dec '15

14 Dec '15

Helo, This patch seems to be exactly what I had in mind. Thanks, nice starting point. http://oss.sgi.com/archives/netdev/2002-11/msg00294.html 2015-12-14 14:33 GMT+02:00 Lennert Buytenhek <buytenh(a)wantstofly.org>: > I hacked something like this up a while ago: > > http://oss.sgi.com/archives/netdev/2002-11/msg00271.html > > This particular patch was kind of dodgy, and I dropped working on it > because there wasn't a whole lot of interest in it, but maybe this is > a useful starting point. -- WBR & WBW, Vitaly

1 0