RE: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-11 Thread Roth, Joe
-users@squid-cache.org Subject: RE: [squid-users] Tproxy4+squid: ebtables wiki Try to look if there is any connection out to server from squid. Also you should look if there is any connection reset. All this things you can look by: tcpdump port 80 -i --- On Wed, 11/11/09, Roth, Joe wrote: > F

RE: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-11 Thread Roth, Joe
hanks, --Joe -Original Message- From: Marko Kotar [mailto:kotarma...@yahoo.com] Sent: Wednesday, November 11, 2009 7:21 PM To: Roth, Joe; squid-users@squid-cache.org Subject: RE: [squid-users] Tproxy4+squid: ebtables wiki Try to look if there is any connection out to server from squid. Als

RE: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-11 Thread Marko Kotar
Try to look if there is any connection out to server from squid. Also you should look if there is any connection reset. All this things you can look by: tcpdump port 80 -i --- On Wed, 11/11/09, Roth, Joe wrote: > From: Roth, Joe > Subject: RE: [squid-users] Tproxy4+squid: ebtables wik

RE: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-11 Thread Roth, Joe
-cache.org Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki Wow, thanks for the sharing, Dan.. it's very informative for me to know that.. because i have been working for 2 weeks till know, very desperated.. i have been using Debian 5 Lenny and Ubuntu 9.04 and 9.10, and so far nothing

RE: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-10 Thread Amos Jeffries
On Tue, 10 Nov 2009 14:50:47 -0800 (PST), Marko Kotar wrote: > I have a same problem on 2.6.27-7 modified by Cavium kernel. > I patched with patches found on wt6 kernel or something(i've tried also > with 2.6.26 and 2.6.25 patches)... > As per the squid wiki documentation. Kernel 2.6._28_ is the

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-10 Thread Marko Kotar
Another thing: Did you compile squid with netfilter configure option? Did you set TPROXY on the port? --- On Mon, 11/9/09, Irvan Adrian K wrote: > From: Irvan Adrian K > Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki > To: squid-users@squid-cache.org > Date: Monday, Nove

RE: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-10 Thread Marko Kotar
wrote: > From: Roth, Joe > Subject: RE: [squid-users] Tproxy4+squid: ebtables wiki > To: "Irvan Adrian K" , "Amos Jeffries" > > Cc: squid-users@squid-cache.org > Date: Monday, November 9, 2009, 3:22 PM > So it sounds like this is a problem > with ubuntu

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Irvan Adrian K
Dear Amos, Everthing should be 'working properly' but in fact, there no one packet arriving on tproxy of squid, after packet come into iptables : 1451 69360 TPROXY tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 TPROXY redirect 0.0.0.0:3129 mark 0x1/0x1 as we

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Amos Jeffries
running the server version as well, everything looks to be compiled >>> properly, dmesg shows TPROXY starting, squid shoq IP spoofing to be >>> starting as well. >>> >>> -Original Message- >>> From: Irvan Adrian K [mailto:ir...@grahamedia.n

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Amos Jeffries
On Mon, 09 Nov 2009 20:46:19 +0700, Irvan Adrian K wrote: > Dear Mr Amos, thanks for your respond, very helpfull.. > > Amos Jeffries wrote: >> Irvan Adrian K wrote: >>> So, What the solution for these threads ? because i'm in the same >>> trouble to make TPROXY4 work in UBUNTU 9.10 Server >>> >

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Irvan Adrian K
08:43:17.339| IPv4 TPROXY support detected. Using. Thanks, Irvan Adrian Amos Kernel 2.6.30.8, Squid 3.1.0.14, iptables 1.4.3.1, ebtables 2.0.9 Marko Kotar wrote: Just curious which kernel version are u using? --- On Thu, 10/29/09, Dan wrote: From: Dan Subject: Re: [squid-us

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Dan
lto:d...@jisp.net] Sent: Monday, November 09, 2009 2:22 PM To: Roth, Joe Cc: Irvan Adrian K; Amos Jeffries; squid-users@squid-cache.org Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki To throw in my 2 cents. I have tried to using both ubuntu server 9.04 and 9.10 neither of them I could g

RE: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Roth, Joe
, Joe Cc: Irvan Adrian K; Amos Jeffries; squid-users@squid-cache.org Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki To throw in my 2 cents. I have tried to using both ubuntu server 9.04 and 9.10 neither of them I could get to work. I experienced the same problem. So to make sure it wasn

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Dan
shows TPROXY starting, squid shoq IP spoofing to be starting as well. -Original Message- From: Irvan Adrian K [mailto:ir...@grahamedia.net.id] Sent: Monday, November 09, 2009 8:46 AM To: Amos Jeffries Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki De

RE: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Roth, Joe
...@grahamedia.net.id] Sent: Monday, November 09, 2009 8:46 AM To: Amos Jeffries Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki Dear Mr Amos, thanks for your respond, very helpfull.. Amos Jeffries wrote: > Irvan Adrian K wrote: >> So, What the solution for thes

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Irvan Adrian K
2.0.9 Marko Kotar wrote: Just curious which kernel version are u using? --- On Thu, 10/29/09, Dan wrote: From: Dan Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki To: "Marko Kotar" Cc: squid-users@squid-cache.org Date: Thursday, October 29, 2009, 5:24 PM Those are the sam

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Amos Jeffries
n't use any of ebtable rules it went through. But accept works. --- On Wed, 10/28/09, Dan wrote: From: Dan Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-11-09 Thread Irvan Adrian K
n are u using? --- On Thu, 10/29/09, Dan wrote: From: Dan Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki To: "Marko Kotar" Cc: squid-users@squid-cache.org Date: Thursday, October 29, 2009, 5:24 PM Those are the same ebtable and iptable rules that I am using except that

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-29 Thread Dan
Kernel 2.6.30.8, Squid 3.1.0.14, iptables 1.4.3.1, ebtables 2.0.9 Marko Kotar wrote: Just curious which kernel version are u using? --- On Thu, 10/29/09, Dan wrote: From: Dan Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki To: "Marko Kotar" Cc: squid-users@squid

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-29 Thread Dan
bridged on guest computer to external interface, other two were bridged together. Drop didn't work in any of them, accept was tested only in first. i think thats all the settings i have. --- On Wed, 10/28/09, Dan wrote: From: Dan Subject: Re: [squid-users] Tproxy4+squid:

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-29 Thread Marko Kotar
first was bridged on guest computer to external interface, other two were bridged together. Drop didn't work in any of them, accept was tested only in first. i think thats all the settings i have. --- On Wed, 10/28/09, Dan wrote: > From: Dan > Subject: Re: [squid-users] T

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-28 Thread Dan
idn't work. I didn't get through any traffic. If i didn't use any of ebtable rules it went through. But accept works. --- On Wed, 10/28/09, Dan wrote: From: Dan Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki To: "Marko Kotar" Cc: squid-users@squid-ca

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-27 Thread Dan
Marko Kotar wrote: Hi, You have incorrect commands in squid wiki for tproxy4 ebtables: I figure out that it is not "--redirect-target DROP" but it is "--redirect-target ACCEPT" . With ebtables using broute ACCEPT and DROP have special meanings. DROP means route the frame and ACCEPT means b

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-27 Thread Marko Kotar
Hi --- On Tue, 10/27/09, Amos Jeffries wrote: > From: Amos Jeffries > Subject: Re: [squid-users] Tproxy4+squid: ebtables wiki > To: "Marko Kotar" > Cc: squid-users@squid-cache.org > Date: Tuesday, October 27, 2009, 11:32 PM > On Tue, 27 Oct 2009 11:50:56 -0700 >

Re: [squid-users] Tproxy4+squid: ebtables wiki

2009-10-27 Thread Amos Jeffries
On Tue, 27 Oct 2009 11:50:56 -0700 (PDT), Marko Kotar wrote: > Hi, > You have incorrect commands in squid wiki for tproxy4 ebtables: > I figure out that it is not "--redirect-target DROP" but it is > "--redirect-target ACCEPT" . um, thats not what the kernel people, TPROXY authors, and other tes