Hi, I've implemented such product, but i was using iptables (instead of ebtables) . i had DNAT  rule that directs every packet (destined to the webserver) to my local process . something like :     $> iptables -t nat -A PREROUTING -t <wevserver> .... In addition, my server (the "local process) was using cttproxy for transparency on it's connection to the webserver . Is this solution applicable for your needs ? zvika On Thu 19 Jul 2:55 2007 Ramana Yarlagadda wrote:

Hi there,

From the archives I understand that cttpproxy will work in the bridge mode also. I am trying to implement a layer 7 transparent proxy using ebtables and transparent proxy. Is there are any document available on how to configure the ebtable and iptable rules?

I have tried based on my understanding the the client connection request is terminated by the proxy server but the foreign connect from the proxy server to the service ( http server) is failing.

The packet is not going out, but is getting re-injected to the local process.

The set up is:

          client <=====> eth0 [ proxy server] eth1- <=======> service/http server

can somebody help me on this issue.

-Thanks in advance

-Ramana