[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: PCAnywhere and IPCHAINS



Simon Tneoh Chee-Boon said:
> Hello nate,
>    When I try to some REDIRECT in ipchains, I got the following message:
> ipchains: No target by that name (Maybe this kernel doesn't support
> transparent proxying?)
> Could this cause the problem?
> I'm using Linux wira 2.2.20 #1 Sat Apr 20 11:45:28 EST 2002 i686 unknown.
>    I've executed tcpdump, no connection to the internal IP for the
> internal
> interface.

redirect only works for redirecting to a local service.

e.g.

server A has a service on port 500
server A has REDIRECT(transparent proxy) which points port 5000->500
connections from remote systems to port 5000 will end up on port 500
connections from the local system(Server A) to port 5000 will fail.

it will NOT work in combonation with port forwarding in redirecting
traffic to another host.

this could be a problem yes if you have a redirect statement on the
same port as your port forwarding. to use transparent proxy you need:
CONFIG_IP_TRANSPARENT_PROXY=y

in your kernel config(debian kernels store their config in
/boot/config-`uname -r`)

nate





Reply to: