Re: transparent proxy with captive page - ipt_recent?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Martin Whinnery wrote:
/sbin/iptables -t nat -A PREROUTING -p tcp --dport 80 -m recent --rcheck --seconds 30 -j REDIRECT --to-ports 8080 /sbin/iptables -t nat -A PREROUTING -p tcp --dport 80 -m recent --set -j REDIRECT --to-ports 82

So I thought the first rule wouldn't match first time around. Then the second rule would provide the proxy instructions page, and make the /proc/sys/net/ipt_recent/DEFAULT entry. This works fine.

But the first rule should match on the next request. And it doesn't seem to. And I don't understand.


I think you need to replace rcheck with update.


HTH,
M4



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux