[tproxy] Patching iptables
jengelh at linux01.gwdg.de
Fri Apr 7 10:40:06 CEST 2006
>It turns out that the port isn't being faked either.
>I'm only able to connect if I set the foreign IP address equal to the local
>IP address and the foreign port equal to the local port.
>A tcpdump at the client shows that the IP headers aren't being modified.
>It's as if tproxy is creating entries in the hash table (TPROXY_ASSIGN and
>the subsequent call to setsockopt() is successful), but isn't overwriting
>the approriate fields in the IP headers.
Nguyen, If you bind() explicitly to 220.127.116.11, does it work then? Just a
Krisztian, any thoughts? Seems to be the reason why I need
'tcp_outgoing_address' in Squid...
More information about the tproxy