Re: [squid-users] Tproxy mode on Debian 7 Table does not exist

On 27/02/2014 11:17 p.m., David Touzeau wrote:
> Thanks Eliezer,
>
>
> But using tmangle allows me to use tproxy in Squid http_port ?

-t mangle is the [ip/ip6/nf/x]tables table where TPROXY operations are
configured.

-t tproxy does not exist, as mentioned by iptables error message.

Squid http_port is a different piece entirely. There are other pieces as
well like the routing rules, libcap2 permissions and spoofing flags.
Together the separate pieces make the transparent proxy feature work.

Amos

>
>
>
> -----Message d'origine----- From: Eliezer Croitoru
> Sent: Wednesday, February 26, 2014 3:18 PM
> To: squid-users_at_squid-cache.org
> Subject: Re: [squid-users] Tproxy mode on Debian 7 Table does not exist
>
> You should use "-t mangle" instead of "tproxy"
>
> Good luck,
> Eliezer
>
> On 26/02/2014 13:57, David Touzeau wrote:
>>
>> uname –a report #1 SMP Debian 3.2.51-1 x86_64 GNU/Linux
>>
>> iptables -t tproxy -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j
>> TPROXY --on-port 80
>> iptables v1.4.14: can't initialize iptables table `tproxy': Table does
>> not exist (do you need to insmod?)
>> Perhaps iptables or your kernel needs to be upgraded.
>>
>> Did i missing something ???
>>
>>
>> Best regards
>
Received on Thu Feb 27 2014 - 10:27:59 MST