Transparent Proxy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



--=-IbFNvtuP4ujFDc8U7lXw
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Hi all,
First here is my network architecture:
3 Linux Box, B act has router (A and C can even be a group of PCs):

------     ------     ------
|  A  |----|  B  |----|  C  |
------     ------     ------

I need to REDIRECT (DNAT) the traffic from A to B, to a kind of PROXY,
and then forward it to C.

For it, I need to retreave on B the real server address requested by A
to open a new connection from B to C.

My Question is:
How to retreave  the conntrack informations for a connection, without
parsing the /proc/net/ipv4/ip_conntrack?

Thank in advance.
-- 
Cyril COUPEL <cyril@coupel.homelinux.org>

--=-IbFNvtuP4ujFDc8U7lXw
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/1.1.6">
</HEAD>
<BODY>
Hi all,<BR>
First here is my network architecture:<BR>
3 Linux Box, B act has router (A and C can even be a group of PCs):<BR>
<BR>
------&nbsp;&nbsp;&nbsp;&nbsp; ------&nbsp;&nbsp;&nbsp;&nbsp; ------<BR>
|&nbsp; A&nbsp; |----|&nbsp; B&nbsp; |----|&nbsp; C&nbsp; |<BR>
------&nbsp;&nbsp;&nbsp;&nbsp; ------&nbsp;&nbsp;&nbsp;&nbsp; ------<BR>
<BR>
I need to REDIRECT (DNAT) the traffic from A to B, to a kind of PROXY, and then forward it to C.<BR>
<BR>
For it, I need to retreave on B the real server address requested by A to open a new connection from B to C.<BR>
<BR>
My Question is:<BR>
How to retreave&nbsp; the conntrack informations for a connection, without parsing the /proc/net/ipv4/ip_conntrack?<BR>
<BR>
Thank in advance.<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
-- <BR>
Cyril COUPEL &lt;<A HREF="mailto:cyril@coupel.homelinux.org";>cyril@coupel.homelinux.org</A>&gt;
</TD>
</TR>
</TABLE>

</BODY>
</HTML>

--=-IbFNvtuP4ujFDc8U7lXw--




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux