[tproxy] I need help with tproxy

Welisson welissontome at ig.com.br
Mon Jun 29 20:30:20 CEST 2009

I would like of a help of yours, in the following situations.

I need redirect all request of port 80, to my proxy server with tproxy
active, however it will not be gateway of my network.
I am using Debian 5 Etch, kernel 2.6.19 in the two servers and iptables
However i did the following, i redirected of gateway to my proxy server
using the command below;

iptables -t tproxy -A PREROUTING -s 189.111.xxx.2 -p TCP --dport 80 -j
TPROXY --on-ip 189.4xx.xxx.10 --on-port 3129

I got the error below in cache.log

2009/06/29 14:38:58| tproxy ip=189.111.xxx.2,0x2a07fbd,port=0 ERROR ASSIGN

Then i did a DNAT rule, e.g below

iptables -t nat -A PREROUTING -s 189.111.xxx.2 -p TCP --dport 80 -j DNAT
--to-destination 189.4xx.xxx.10

and in proxy server the following command

iptables -t tproxy -A PREROUTING -s 189.111.xxx.2 -p TCP --dport 80 -j
TPROXY  --on-port 3129

The request finised giving timeout.

I would like know, if possible used tproxy in this situation.

station <---------->gateway<---------->InterNet
                               | redirected to proxy using iptables

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/tproxy/attachments/20090629/5ac15c9b/attachment.htm 

More information about the tproxy mailing list