Preconditions for TPROXY within ip6tables

AchimRS · 04-25-2013, 05:09 AM

Hi all,
I try to use TPROXY to forward a port to another, but it is simly not working.

If all ip6tables chains are empty (I know, it's a security risk, but it's only for testing on private network), and I make the following:

Code:

ip6tables -t mangle -A PREROUTING -i eth0 -p tcp --dport 80 -j TPROXY --on-port 8080

I assume accessing port 80 will be forwarded to an application listening to port 8080, but there is nothing.

I've done:
- modprobe xt_TPROXY
- echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
- tried in new Debian Wheezy and in Ubuntu 12.04 LTS

What did I forgot?

Thanks
Achim

vishesh · 04-26-2013, 06:37 AM

Try tproxy table in place of mangle table

iptables -t tproxy

Thanks

AchimRS · 04-27-2013, 06:09 AM

nope - it only generates an error:
"Table does not exist (do you need to insmod?)"
even with loaded xt_TPROXY module

I've trid it under Wheezy with ip6tables v1.4.14