[tproxy] Problems with the Tproxy and Zorp.

Balazs Scheidler bazsi at balabit.hu
Thu Apr 15 10:15:57 CEST 2010


On Mon, 2010-03-01 at 17:23 +0100, Lupi The Loop wrote:
> Hello,
> 
> I have configured a transparent HTTP proxy using Iptables and Zorp but
> It does not work. 
> 
> SYSTEM INFO:
> 
> loop at santeles:~$ uname -a
> Linux santeles 2.6.31-19-server #56-Ubuntu SMP Thu Jan 28 02:39:34 UTC
> 2010 x86_64 GNU/Linux
> 
> loop at santeles:~$ iptables -V
> iptables v1.4.4
> 
> root at santeles:/home/loop# zorpctl version
> Zorp 3.0.8
> Revision: 
> Compile-Date: May  4 2009 04:17:42
> Config-Date: 2009/05/04
> Trace: off
> Debug: off
> IPOptions: off
> IPFilter-Tproxy: off
> Netfilter-Tproxy: on
> Netfilter-Linux22-Fallback: on
> Linux22-Tproxy: off
> Conntrack: on
> 
> Zorplib 3.0.6.4.2
> Revision: devel at balabit.hu--zorp-1/zorp-lib--mainline--3.0--patch-116
> Compile-Date: Nov  9 2009 09:50:26
> Trace: off
> MemTrace: off
> Caps: on
> Debug: off
> StackDump: off

Zorp 3.0.8 doesn't support the final tproxy version that got included in
the kernel (it long predates that), you should try 3.1.15c from here:

http://www.balabit.com/downloads/files/zorp/zorp-src/zorp_3.1.15c.tar.gz


-- 
Bazsi



More information about the tproxy mailing list