Hi, I've implemented such product, but i was using iptables (instead of ebtables) . i had DNAT rule that directs every packet (destined to the webserver) to my local process . something like : $> iptables -t nat -A PREROUTING -t <wevserver> .... In addition, my server (the "local process) was using cttproxy for transparency on it's connection to the webserver . Is this solution applicable for your needs ? zvika On Thu 19 Jul 2:55 2007 Ramana Yarlagadda wrote:
Hi there,
From the archives I understand that cttpproxy will work in the bridge mode also. I am trying to implement a layer 7 transparent proxy using ebtables and transparent proxy. Is there are any document available on how to configure the ebtable and iptable rules?
I have tried based on my understanding the the client connection request is terminated by the proxy server but the foreign connect from the proxy server to the service ( http server) is failing.
The packet is not going out, but is getting re-injected to the local process.
The set up is:
client <=====> eth0 [ proxy server] eth1- <=======> service/http server
can somebody help me on this issue.
-Thanks in advance
-Ramana