On Tue, 2009-01-20 at 11:39 +0200, elyasaf wrote:
>
>
> Not "ip contract" but "ip conntrack" ("connection tracking
> support").
you don't, you can query the original destination address using
getsockname() just like in the old Linux 2.2 days.
tproxy does not even need conntrack at all, although they can
interoperate.
--
Bazsi