[tproxy] Tproxy error loading rule of iptables

Laszlo Attila Toth panther at balabit.hu
Wed Oct 24 17:22:45 CEST 2007


And what is the output of
extensions/.tproxy-test?

Is these lines?
TPROXY
tproxy

I see that the tproxy match is loaded, but the TPROXY target is not:
ipt_TPROXY is missing from the module list.

Did you enable the TPROXY target? In .config:
CONFIG_IP_NF_TARGET_TPROXY=m


Rodrigo Ferreira Santos írta:
> Yes Laszlo applied the patch this:
> |
> cd /usr/src/iptables-1.3.6.0debian1
> cat <pathtocttproxy>/iptables/iptables-1.3-cttproxy.diff | patch -p1
> chmod +x extensions/.tproxy-test
> make KERNELDIR=/usr/src/linux|
> 
> Once installed this:
> 
> |cd /usr/src/iptables-1.3.6.0debian1
> dpkg-buildpackage -b -rfakeroot
> cd /usr/src/
> dpkg -i iptables_1.3.6.0debian1-5_i386.deb
> 
> |
> Have the following modules loaded
> 
> 
> ipt_tproxy              1792  0
> iptable_tproxy         16632  0
> iptable_nat             7332  1 iptable_tproxy
> ip_nat                 22220  2 iptable_tproxy,iptable_nat
> ip_conntrack           50400  3 iptable_tproxy,iptable_nat,ip_nat
> ip_tables              12964  4 
> iptable_mangle,iptable_filter,iptable_tproxy,iptable_nat
> x_tables               13316  3 ipt_tproxy,iptable_nat,ip_tables
> 
> Thank you for your attention ..
> 
> 
> 
> 
> 
> 
> 2007/10/24, Laszlo Attila Toth < panther at balabit.hu 
> <mailto:panther at balabit.hu>>:
> 
>     Rodrigo Ferreira Santos írta:
>      > I need help with problems already done all this work and the
>     squid and
>      > the kernel already have the modules but the iptables not look so
>     raises
>      > the error message:
>      >
>      > cache:~# iptables -t tproxy -A PREROUTING -i eth1 -p tcp --dport
>     80 -j
>      > TPROXY --on-port 3128
>      > iptables v1.3.6: Unknown arg `--on-port'
>      > Try `iptables -h' or 'iptables --help' for more information.
>      >
> 
>     Did you applied the iptables patch? I got this message when I tried to
>     use iptables without TPROXY target.
> 
>     --
>     Panther
> 


-- 
Panther


More information about the tproxy mailing list