Hi,

TPROXY is Linux specific.
It's included in mainline kernel from 2.6.30, thanks to excellent work of Balabit Ltd.

I think it's the decision of maintainers to include code that is OS specific.

I tried to write code as non-intrusive as I could.
I think it should compile on any supported platform.

Global TProxy 0 option preserves original behavior.
Global Tproxy 1 option checks for TPROXY availabilty.
(use setsockopt and optname = 19 (IP_TRANSPARENT). I don't know optname 19 have any meaning in others OSs)

I don't know about similar feature in other OSs, but it would be nice to implement it in as many supported platform as possible.

Regards,
ivan


Joe Gooch írta:
+1

I'd use it!
Joe Gooch
K12 Systems
-----Original Message-----
From: Jean-Pierre van Melis [mailto:[email protected]] Sent: Friday, October 02, 2009 6:47 AM
To: '[email protected]'
Subject: [Pound Mailing List] TPROXY

Is there some chance this TPROXY can get in the main code?
Having a transparent proxy makes it so much more powerful...
I'm sure it can be made it's not getting in the way of those using a classic proxy.

I'm running pound on my router which is also the gateway of my network and having a transparent proxy means I do not have to change the logging of my webserver. Even if you changed the logging.. it still isn't the same as all the backends need to be made aware they are in fact listening to a proxy and not to the real client....



--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.

--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.


--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.

Reply via email to