New Linux 2.6 tproxy snapshots
Hi, Yesterday we've finally found the cause of a serious problem in TProxy, which occasionally led to connections being NAT-ted to bogus addresses on SMP hardware. It was a really nasty problem with a dead-simple solution: the removal of a single 'static' keyword... Yeah, it was a typical bang-your-head-against-the-wall problem. :) Because of this and a few other (less significant) changes made in the last months I'm goint to publish a new "official" release next week. For the impatient, I've created new tproxy snapshot tarballs: http://people.balabit.hu/hidden/tproxy2-2.6.16_20060908.tar.bz2 http://people.balabit.hu/hidden/tproxy2-2.6.17_20060908.tar.bz2 http://people.balabit.hu/hidden/tproxy2-2.6.18_20060908.tar.bz2 -- Regards, Krisztian Kovacs
Hi,
Yesterday we've finally found the cause of a serious problem in TProxy, which occasionally led to connections being NAT-ted to bogus addresses on SMP hardware. Because of this and a few other (less significant) changes made[...]
Was my kernel tree of any use to find out why some connections timed out? Jan Engelhardt --
Mr. Engelhardt, due new Intel's G965 Chipset we were forced to upgrade to kernel 2.6.19 (just released). Do you plan to release a tproxy version for this kernel version? Regards Edinilson --------------------------------------------------------- ATINET-Professional Web Hosting Tel Voz: (0xx11) 4412-0876 http://www.atinet.com.br
On Dec 1 2006 16:05, Edinilson J. Santos wrote:
Mr. Engelhardt, due new Intel's G965 Chipset we were forced to upgrade to kernel 2.6.19 (just released).
Do you plan to release a tproxy version for this kernel version?
I tried to patch cttproxy-2.0.5-2.6.18 into 2.6.19 but there have been some changes I cannot resolve too fast, __ip_nat_reserved_find_manip() uses the deprecated LIST_*() macros that are not present in 2.6.19 anymore. Maybe Krisztián has an idea. -`J' --
Hi, On Saturday 02 December 2006 12:46, Jan Engelhardt wrote:
On Dec 1 2006 16:05, Edinilson J. Santos wrote:
Mr. Engelhardt, due new Intel's G965 Chipset we were forced to upgrade to kernel 2.6.19 (just released).
Do you plan to release a tproxy version for this kernel version?
I tried to patch cttproxy-2.0.5-2.6.18 into 2.6.19 but there have been some changes I cannot resolve too fast, __ip_nat_reserved_find_manip() uses the deprecated LIST_*() macros that are not present in 2.6.19 anymore. Maybe Krisztián has an idea.
I have a partial patch now. Unfortunately it still does not work. There were quite serious API changes, to the point that now I don't have any idea how the removal of the userinfo argument of target functions can be handled. (Apart from reverting that patch: it's git commit fe1cb10873b44cf89082465823ee6d4d4ac63ad7) I'll try to come up with something more elegant than including a reversed diff in the tproxy patch... -- Regards, Krisztian Kovacs
I think that I'm doing something wrong with tproxy... 1o) Download iptables source in /usr/src/iptables-1.3.5 - OK 2o) Download kernel source 2.6.16 in /usr/src/linux - OK 3o) Patch iptables source - apparently ok, without errors (with: cd/usr/src/iptables-1.3.5 cat /tmp/tproxy2-2.6.16/0{1,2,3}-*.patch | patch -p1 -OK) 4o) Patch kernel source (with: cd/usr/src/linux cat /tmp/tproxy2-2.6.16/0{1,2,3}-*.patch | patch -p1 HERE is the problem: patch asks me which file I want to patch. Which step am I doing wrong? Thanks for any help Edinilson --------------------------------------------------------- ATINET-Professional Web Hosting Tel Voz: (0xx11) 4412-0876 http://www.atinet.com.br
I think that I'm doing something wrong with tproxy...
1o) Download iptables source in /usr/src/iptables-1.3.5 - OK 2o) Download kernel source 2.6.16 in /usr/src/linux - OK 3o) Patch iptables source - apparently ok, without errors (with: cd/usr/src/iptables-1.3.5 cat /tmp/tproxy2-2.6.16/0{1,2,3}-*.patch | patch -p1 -OK) 4o) Patch kernel source (with: cd/usr/src/linux cat /tmp/tproxy2-2.6.16/0{1,2,3}-*.patch | patch -p1 HERE is the problem: patch asks me which file I want to patch.
Please post the exact error message. Jan Engelhardt --
participants (3)
-
Edinilson J. Santos
-
Jan Engelhardt
-
KOVACS Krisztian