[tproxy] Patching iptables

Jan Engelhardt jengelh at linux01.gwdg.de
Fri Apr 7 10:40:06 CEST 2006

>It turns out that the port isn't being faked either.
>I'm only able to connect if I set the foreign IP address equal to the local
>IP address and the foreign port equal to the local port.
>A tcpdump at the client shows that the IP headers aren't being modified.
>It's as if tproxy is creating entries in the hash table (TPROXY_ASSIGN and
>the subsequent call to setsockopt() is successful), but isn't overwriting
>the approriate fields in the IP headers.
>Any thoughts?

Nguyen, If you bind() explicitly to, does it work then? Just a 

Krisztian, any thoughts? Seems to be the reason why I need 
'tcp_outgoing_address' in Squid...

Jan Engelhardt

More information about the tproxy mailing list