27 Nov
2009
27 Nov
'09
9:11 a.m.
Hi, On Fri, Nov 27, 2009 at 9:26 AM, KOVACS Krisztian <hidden@balabit.hu> wrote:
Hi,
On Thu, 2009-11-26 at 18:19 +0100, Andreas Schultz wrote:
Hi,
git bisect shows that TPROXY has been broken by commit f7c6fd2465d8e6f4f89c5d1262da10b4a6d499d0, [PATCH] net: Fix RPF to work with policy routing
I had a look at the patch, and it seems logical that this would break TPROXY.
Indeed, that's a good catch. If this is indeed the problem you should be able to work it around by disabling rpfilter on the ingress interface. Does it work that way?
That was my first guess also. I disabled rp_filter on all interfaces and it had no impact. So far, only reverting that patch has solved the problem. Andreas