/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! /* ALSO: Don't quote this header. It makes you look lame :-) */
Thank you for the advice. I installed ipchains-1.3.9 and tried ipchains -A INPUT -p tcp -d 0/0 80 -j REDIRECT 8080 but ipchains reported: ipchains: No target by that name (Maybe this kernel doesn't support transparent proxying?) but I did enable the IP_TRANSPARENT_PROXY option when I compiled the kernel. The following is part of the options used to compile the kernel. #define CONFIG_PACKET 1 #define CONFIG_NETLINK 1 #define CONFIG_RTNETLINK 1 #define CONFIG_NETLINK_DEV 1 #define CONFIG_FIREWALL 1 #define CONFIG_FILTER 1 #define CONFIG_UNIX 1 #define CONFIG_INET 1 #undef CONFIG_IP_MULTICAST #define CONFIG_IP_ADVANCED_ROUTER 1 #define CONFIG_RTNETLINK 1 #define CONFIG_NETLINK 1 #undef CONFIG_IP_MULTIPLE_TABLES #undef CONFIG_IP_ROUTE_MULTIPATH #undef CONFIG_IP_ROUTE_TOS #undef CONFIG_IP_ROUTE_VERBOSE #undef CONFIG_IP_ROUTE_LARGE_TABLES #undef CONFIG_IP_PNP #define CONFIG_IP_FIREWALL 1 #define CONFIG_IP_FIREWALL_NETLINK 1 #define CONFIG_NETLINK_DEV 1 #define CONFIG_IP_TRANSPARENT_PROXY 1 #define CONFIG_IP_MASQUERADE 1 /* * Protocol-specific masquerading support will be built as modules. */ #undef CONFIG_IP_MASQUERADE_ICMP /* * Protocol-specific masquerading support will be built as modules. */ #define CONFIG_IP_MASQUERADE_MOD 1 #undef CONFIG_IP_MASQUERADE_IPAUTOFW #define CONFIG_IP_MASQUERADE_IPAUTOFW_MODULE 1 #undef CONFIG_IP_MASQUERADE_IPPORTFW #define CONFIG_IP_MASQUERADE_IPPORTFW_MODULE 1 #undef CONFIG_IP_MASQUERADE_MFW #define CONFIG_IP_MASQUERADE_MFW_MODULE 1 #undef CONFIG_IP_ROUTER #undef CONFIG_NET_IPIP #undef CONFIG_NET_IPGRE #undef CONFIG_IP_ALIAS #undef CONFIG_ARPD #undef CONFIG_SYN_COOKIES What't the problem? Thanks Ronghua On Wed, 6 Nov 2002, Fuzzy Fox wrote: > Ronghua Zhang <[EMAIL PROTECTED]> wrote: > > > > Since I am currently working with kernel 2.2.x, netfilter is not availble. > > I apologize, I misread your kernel version. > > > I have to play with ip_masq. Actually, I am asked to write a module > > to do this [...] > > You surely don't need to write a module just to forward traffic, as > ipchains provides the same functionality. > > An equivalent ipchains statement to the one I posted earlier would be: > > ipchains -A INPUT -i $INT_IF -p tcp -d 0/0 80 -j REDIRECT 8080 > > In order for this to work, your kernel needs to have been compiled with > the CONFIG_IP_TRANSPARENT_PROXY option enabled. > > _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.
