Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread Dominic Benson
On 7 Jul 2011, at 01:22, Tom Eastep wrote: On Jul 6, 2011, at 5:17 PM, J. Randall Owens wrote: I don't know about TPROXY in particular, but in most places in shorewall6, you can enclose the IPv6 addresses (including prefix length) in angle brackets, like so (all mine are in hosts so

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread J. Randall Owens
On Thu, 7 Jul 2011, J. Randall Owens wrote: Date: Thu, 7 Jul 2011 04:02:37 From: J. Randall Owens jrowens.sourcefo...@ghiapet.net To: Shorewall Users shorewall-users@lists.sourceforge.net I don't think you've shown us the actual tcrules line 4, have you? Does it start with

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread Dominic Benson
On 07/07/11 14:39, Tom Eastep wrote: On Thu, 2011-07-07 at 04:22 -0700, J. Randall Owens wrote: I take that back now. While it's not on that page, I see where Tc.pm has a place for picking out an IP address as a third parameter. In that case, I'd say that process_tc_rule is messing up at

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread J. Randall Owens
On Thu, 7 Jul 2011, Tom Eastep wrote: Date: Thu, 7 Jul 2011 06:39:41 From: Tom Eastep teas...@shorewall.net To: Shorewall Users shorewall-users@lists.sourceforge.net Subject: Re: [Shorewall-users] Tproxy with Shorewall6 On Thu, 2011-07-07 at 04:22 -0700, J. Randall Owens wrote: I take

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread Tom Eastep
On Thu, 2011-07-07 at 14:59 +0100, Dominic Benson wrote: On 07/07/11 14:39, Tom Eastep wrote: Attached is a patch which allows an IPv6 address in the third parameter. Enclosing the address in [...] or... is optional. Great, that works perfectly! Thanks for confirming, Dominic --

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-06 Thread Tom Eastep
On Jul 6, 2011, at 4:35 PM, Dominic Benson wrote: I have since put in a new router, with recent kernel and iptables, so I have now got it working for real, and it works well - thanks. One niggle I did encounter was in specifying address as the third argument to TPROXY in tcrules6 - the

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-06 Thread J. Randall Owens
On Thu, 7 Jul 2011, Dominic Benson wrote: Date: Wed, 6 Jul 2011 16:35:51 From: Dominic Benson domi...@lenny.cus.org Reply-To: Shorewall Users shorewall-users@lists.sourceforge.net To: Shorewall Users shorewall-users@lists.sourceforge.net Subject: [Shorewall-users] Tproxy with Shorewall6

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-06 Thread Tom Eastep
On Jul 6, 2011, at 5:17 PM, J. Randall Owens wrote: I don't know about TPROXY in particular, but in most places in shorewall6, you can enclose the IPv6 addresses (including prefix length) in angle brackets, like so (all mine are in hosts so far, so these are with interfaces):