[tproxy] tproxy routing issue within processes in the same machine

Balazs Scheidler bazsi at balabit.hu
Tue Sep 18 10:04:42 CEST 2012


Hi,

IIRC it doesn't work for local connections/sockets, as it can't reroute
outgoing packets to the local interface.

On Sun, 2012-07-29 at 06:30 -0700, Ming-Ching Tiew wrote:
> 
> tproxy has  problem working within 2 processes on the same machine,
> ie a client process using tproxy to spoof an IP,  has problem 
> communicating  with the server process within the same machine.
> 
> It seems tproxy attaches itself to mangle table PREROUTING
> chain, that is unable to hook to the in-machine process. I figured
> that for it to work, in this case, it needs to be able to attach itself
> to the INPUT chain. However that hook is not supported.
> 
> Is there a way to get around this problem ? 

-- 
Bazsi




More information about the tproxy mailing list