Re: How to retrieve original source address with FTP/NAT/TPROXY

2018-02-20 Thread Gregory Vander Schueren
, Gregory Vander Schueren wrote: Hi Pablo, Thank you for getting back to me. Also thanks for pointing me to libnetfilter_conntrack, I will definitely have a look. I am using kernel 4.1.39 and the issue can be reproduced with the following ruleset on the Proxy host: iptables -t nat -A POSTROUTING

Re: [PATCH] inet: don't call skb_orphan if tproxy happens in layer 2

2018-02-16 Thread Gregory Vander Schueren
Hi Florian & Pablo, Thank your very much for your quick feedback. On 02/16/2018 12:28 PM, Pablo Neira Ayuso wrote: On Fri, Feb 16, 2018 at 12:07:06PM +0100, Florian Westphal wrote: Gregory Vander Schueren <gregory.vanderschue...@tessares.net> wrote: [ cc netdev ] If sysctl brid

[PATCH] inet: don't call skb_orphan if tproxy happens in layer 2

2018-02-15 Thread Gregory Vander Schueren
activates) Signed-off-by: Gregory Vander Schueren <gregory.vanderschue...@tessares.net> Signed-off-by: Matthieu Baerts <matthieu.bae...@tessares.net> --- Hi, We noticed issues when using tproxy with net.bridge.bridge-nf-call-iptables enabled. In such case, ip_rcv() basically undo

Re: How to retrieve original source address with FTP/NAT/TPROXY

2018-02-12 Thread Gregory Vander Schueren
(addr.sin_addr); printf("%s\n", ip); } On 02/08/2018 05:55 PM, Pablo Neira Ayuso wrote: Hi Gregory, On Tue, Feb 06, 2018 at 03:40:20PM +0100, Gregory Vander Schueren wrote: Hello, I have the following IPv4 network: FTPClient <-> Proxy <--> FTP

How to retrieve original source address with FTP/NAT/TPROXY

2018-02-06 Thread Gregory Vander Schueren
Hello, I have the following IPv4 network: FTPClient <-> Proxy <--> FTPServer. 10.0.0.2 10.0.0.1 1.1.1.11.1.1.2 FTPClient connects to FTPServer in PASSIVE mode, meaning the FTPClient initiates the data connection towards FTPServer. Proxy