Hello, I have problems with Zorp 3.0.8 (Debian Etch) with tproxy 4.0.0. I compiled kernel 2.6.22.1 without problems. But then I found that the patch is incomplete. There is file .tproxy-test in iptables patch: #!/bin/sh [ -f $KERNEL_DIR/include/linux/netfilter_ipv4/ipt_TPROXY.h ] && echo TPROXY [ -f $KERNEL_DIR/net/ipv4/netfilter/ipt_tproxy.c ] && echo tproxy Tested files are not included in kernel patch. I found ipt_TPROXY.h in patch for Ubuntu kernel and ipt_TPROXY.c in the same patch, but not ipt_tproxy.c. After successfull compilation (I have changed ipt_tproxy.c in .tproxy-test to ipt_TPROXY.c) I tried to follow README instructions, but system behaves very strangely. # iptables -t tproxy -A PREROUTING -p tcp --dport 80 -j TPROXY --on-port 50080 works well, counters increases as traffic flow thru firewall, but Zorp sees nothing and when I stop Zorp, nothing changes, so I think that everything is just routed. # iptables -A INPUT -m tproxy -j ACCEPT produces 'Invalid argument' and if I add: # iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-dest IP:50080 Zorp gets connection, but it hangs and no connection comes out from firewall. I think that it is obvious that I am new in Zorp/tproxy and these problems might be very trivial to resolve, but I cannot find anything useful to find resolusion. Thank you for any help. Ondrej Kraus