Hi, I've released my latest version of the TPROXY patches available at
http://www.balabit.hu/en/downloads/tproxy/ The changes include: * handle fragmented packets (also for LOCAL_OUT) * handle parallel sessions with non-unique address tuples (using a cookie assigned to sessions) I've sent this patch to Andi Kleen to have feedback from the core network developers, as it changes some parts in core TCP. TODO: * need to delete entries of the translation table (when a session ends) this again needs some support from the core) Comments welcome, -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1