Re: ip6tables redirect

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



"Jan Engelhardt" jengelh@xxxxxxxxxx wrote:
>> On Thursday 2010-12-02 13:15, Fred Zwarts wrote:
>> 
>>> We are moving from an IPv4 only environment to a mixed IPv4/IPv6
>>> environment. 
>>> On this server, we use for iptables a REDIRECT for the nat table.
>>> This does not work for ip6tables. It complains that it does not know
>>> the option --to-port. My question is how to do such a port redirect
>>> with ip6tables. 
>> 
>> Using -j TPROXY and appropriate local routing, I would say.

Thanks for the suggestion, but I cannot find documentation fro TPROXY,
nor for the local routing.

The IPV4 definition is as follows:

iptables -A PREROUTING -t nat -p tcp --dport 8080 -j REDIRECT --to-port 587

For ip6tables I tried:

ip6tables -A PREROUTING -t mangle -p tcp --dport 8080 -j TPROXY --on-port 587

and

ip6tables -A PREROUTING -t mangle -p tcp --dport 8080 -j TPROXY --to-port 587

But then it complains again that it does not know option --to-port or --on-port.
So, how should I specify the port to which the packet should be redirected?



--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux