Hi Jan, Thanks for the super fast response! I've been reading through your previous posts where you've suggested to use the TPROXY method, but after hours of attempting to get it operating it still will not 'proxy' the packets through to the end service. We're using the 'REDIRECT' target only as an end catch-all method for unauthenticated users on our network access server; if the user has access they are forwarded; if not they are redirected to a service listening on any IP on the same server; however each time I've tested with the TPROXY options, the listening service never sees any packets. TPROXY its self seems a little more complicated than I need for this situation and when I researched the redirect target for v6 I came across this post which seemed to reference a patch for adding in the redirect target to ip6tables: http://marc.info/?l=netfilter-devel&m=132185516524115&w=2 If this patch isn't to be included; could you perhaps point me in the direction of some detailed reference of how to get TPROXY established in the same fashion as redirect? Many thanks Steve. -----Original Message----- From: jengelh@xxxxxxxxxxxxxxxx [mailto:jengelh@xxxxxxxxxxxxxxxx] On Behalf Of Jan Engelhardt Sent: Tuesday, 29 May 2012 10:21 PM To: Steve (Telsat Broadband) Cc: netfilter-devel@xxxxxxxxxxxxxxx Subject: Re: Redirect target for IPv6 inclusion On Tuesday 2012-05-29 13:16, Steve (Telsat Broadband) wrote: >Hi All, > >I've seen a reference that a REDIRECT target for IPv6 is being worked >on and I would like to know if/when it might be included into >ip6tables? This redirect target forms a very large part of our network >access server and is critical for our IPv4 operations and will also be >critical for us to start operating with IPv6. There is already redirect-to-local with -j TPROXY. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
