[tproxy] TPROXY + Arp Table

Balazs Scheidler bazsi at balabit.hu
Fri Aug 17 09:14:13 CEST 2007


On Thu, 2007-08-16 at 13:21 -0700, Jojy Varghese wrote:
> Thanks Bazsi. In a real life scenario, where my proxy server will be
> inside a firewall how can the proxy server make the routing decision?
> The trafic is always going to flow through the firewall/router and
> then come to the subnet having the proxy server.

In order for tproxy to work the traffic must flow through the tproxy
box. Either install the proxy on the firewall, or put it in-line with
the firewall. That's the only way to do it.

With Zorp you could script a different scenario, but I guess you are not
using Zorp as a firewall.

-- 
Bazsi



More information about the tproxy mailing list