On 3/14/07, Jan Engelhardt <jengelh@linux01.gwdg.de> wrote:
On Mar 14 2007 11:22, KOVACS Krisztian wrote:
On Tuesday 13 March 2007 21:01, Pranav Desai wrote:
I am trying to patch the 2.6.20 kernel with the patches in cttproxy-2.6.20-2.0.6.tar.gz. But it doesnt show up in 'make menuconfig'.
Could you send your .config to me (in private)? There quite a few Netfilter changes in recent 2.6 kernels. I suspect it has something to do with either using nf_conntrack instead of ip_conntrack, not enabling x_tables, or something like this. I can say more based on your .config.
It _is_ the change from ip to nf. (From "Layer3-dependent tracking" to "Layer3-independent tracking" as it was called in 2.6.18)
I found the solution. In the 2.6.20 kernel there is an option to enable transparent proxy using the layer 3 dependent option ... networking -> networking options -> packet filtering framework -> core netfilter -> netfilter connection tracking support pick the OBSOLETE (layer 3 dependent option) Then you will get the transparent proxy options enabled in the IP netfilter section. Not sure if using something OBSOLETE has any other implication ... -- Pranav
Yeah, you need to patch nf_conntrack_expect instead of ip_conntrack (for NF_NAT_RES), etc. I already tried changing but got stuck right away.
Jan -- _______________________________________________ tproxy mailing list tproxy@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/tproxy
-- ------------------------------ http://pd.dnsalias.org