Re: Valid requirement for REDIRECT target on IPv6 where TPROXY won't do.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 28/06/2012 1:32 p.m., Steve (Telsat Broadband) wrote:
Hi All,

I would like to see if there is some way we can get the 'REDIRECT' target
implemented into ip6tables; this isn't for NAT purposes; but rather for the
process of creating a captive portal for network users access requests.  We
currently use the REDIRECT target on our gateway for IPv4 and need the same
functionality for IPv6.

It has been suggested that 'TPROXY' which is available in the mangle table
is a replacement; but it isn't.  I have tested TPROXY every which way but
still to no avail; the packets hit the TPROXY rule but simply do not get
send to the captive portal process which is running on the gateway machine.

Strange. Quite a few people are happily using TPROXY to redirect IPv6 packets to a local Squid proxy portal. The only instances I've found problems are where NAT is also being used on the box and changing the packets after TPROXY has setup the routing rules.

AYJ

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux