[tproxy] failure to apply snat mapping?
KOVACS Krisztian
hidden@balabit.hu
Fri, 23 Apr 2004 11:59:43 +0200
Hi,
On Wed, 2004-04-21 at 19:35, Lennert Buytenhek wrote:
> Let's say that I have an app that connects to IP address 1.2.3.4, and uses
> tproxy to fake the source address as 5.6.7.8. Bind the socket, then call
> into tproxy, and then connect() and ta da -- everything works as expected.
>
> Now I decide that that app should not connect to 1.2.3.4, but instead to
> 1.2.3.5. I don't want to modify the source and restart it, so I add a nat
> rule in the iptables nat/OUTPUT chain to DNAT the address to 1.2.3.5.
>
> The app now (unknowingly) connects to 1.2.3.5, that works fine. But.. the
> source address used for the connection is now the source address of the box
> and not anymore 5.6.7.8? :((
Do you have "NAT of local connections" enabled or disabled?
--
Regards,
Krisztian KOVACS