[tproxy] netcat for tproxy (and additional noob questions)

Adrian Chadd adrian.chadd at gmail.com
Tue Jul 7 15:23:45 CEST 2009


2009/7/7 John Lauro <john.lauro at covenanteyes.com>:

>> Reusing the original port is usually a bad idea. A notable example of
>> things breaking is Netfilter connection tracking, which gets confused
>> if
>> you reuse the exact same endpoints for a different connection.
>
> Technically they are not the exact same if you include the interface.  If it
> doesn't consider the interface then they would appear the same.

Well, you don't always have >1 interface. Consider WCCPv2 "cache on a
stick" with only one upstream interface to the router redirecting it
both the client and server traffic.


Adrian


More information about the tproxy mailing list