7 Apr
2006
7 Apr
'06
9:40 a.m.
It turns out that the port isn't being faked either.
I'm only able to connect if I set the foreign IP address equal to the local IP address and the foreign port equal to the local port.
A tcpdump at the client shows that the IP headers aren't being modified. It's as if tproxy is creating entries in the hash table (TPROXY_ASSIGN and the subsequent call to setsockopt() is successful), but isn't overwriting the approriate fields in the IP headers.
Any thoughts?
Nguyen, If you bind() explicitly to 1.2.3.4, does it work then? Just a guess... Krisztian, any thoughts? Seems to be the reason why I need 'tcp_outgoing_address' in Squid... Jan Engelhardt --