[tproxy] Fwd: Tproxy changes for performing dual NAT

Arun S hi2arun at gmail.com
Mon Oct 15 15:59:43 CEST 2007


AFAIK, Squid still uses setsockopt - IP_TPROXY. It is yet to support
IP_TRANSPARENT changes.

On 15/10/2007, Herlon Alcantara Matos <herlon at lcimt.com.br> wrote:
> What is the correct version of squid for implementation of tproxy 4.03.
>
> ----- Original Message -----
> From: "KOVACS Krisztian" <hidden at sch.bme.hu>
> To: "Arun S" <hi2arun at gmail.com>
> Cc: <tproxy at lists.balabit.hu>
> Sent: Monday, October 15, 2007 8:26 AM
> Subject: Re: [tproxy] Fwd: Tproxy changes for performing dual NAT
>
>
> > Hi,
> >
> > On Mon, Oct 15, 2007 at 01:22:26PM +0200, KOVACS Krisztian wrote:
> >> On Mon, Oct 15, 2007 at 04:30:03PM +0530, Arun S wrote:
> >> > I am not aware of this. I have tried tproxy4.0.3 and
> >> > Squid-2.6-STABLE14. But real transparency was not happening. Does it
> >> > require support from the application too?
> >>
> >> Yes, and the modifications it requires are different compared to those of
> >> required by tproxy2.
> >>
> >> > Could you please throw some light on this?
> >>
> >> I don't have a patch for squid at the moment but creating one should be
> >> quite straigtforward. I'll try to come up with one once I find the time
> >> to
> >> do so.
> >>
> >> A very brief README:
> >> http://marc.info/?l=linux-netdev&m=119229721212273&w=2
> >>
> >> As an example, here's the patch necessary to make netcat work:
> >> http://people.netfilter.org/hidden/tproxy/netcat-ip_transparent-support.patch
> >
> > Oh, sorry -- in case of 4.0.3 these are not the right pointers. Take a
> > look at the documentation and examples which come with the downloaded
> > package.
> >
> > --
> > KOVACS Krisztian
> > _______________________________________________
> > tproxy mailing list
> > tproxy at lists.balabit.hu
> > https://lists.balabit.hu/mailman/listinfo/tproxy
>
>


-- 
Regards,
Arun S.


More information about the tproxy mailing list