[tproxy] Patching iptables

[Jan Engelhardt]

>
>It turns out that the port isn't being faked either.
>
>I'm only able to connect if I set the foreign IP address equal to the local
>IP address and the foreign port equal to the local port.
>
>A tcpdump at the client shows that the IP headers aren't being modified.
>It's as if tproxy is creating entries in the hash table (TPROXY_ASSIGN and
>the subsequent call to setsockopt() is successful), but isn't overwriting
>the approriate fields in the IP headers.
>
>Any thoughts?

Nguyen, If you bind() explicitly to 1.2.3.4, does it work then? Just a 
guess...

Krisztian, any thoughts? Seems to be the reason why I need 
'tcp_outgoing_address' in Squid...


Jan Engelhardt
--