Re: Proxy-suite and transparent proxying on FreeBSD not working

--ikeVEW9yuYc//A+q
Content-Type: text/plain; charset=iso-8859-15
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Hi!

OK, I've a fresh FreeBSD 4.6.2 up and running now - it does not
work any more (still works on the old FreeBSD 4.4 installation).

To get it working, you have to update to v3.4.29, it contains
a fix for the problem - see ip_fil3.4.29/HISTORY file:

"[...]
fix bug in SIOCGNATL handler that did not preserve the expected
byte order from earlier versions in the port number
[...]"

In attachement, you will find two small patches for v3.4.29
I've done while the ipf update:

ip_fil3.4.29.chmod_fix.dif.gz - fixes a -chmod in BSD/Makefile
ip_fil3.4.29.INST_fix.dif.gz  - fixes a FreeBSD INST instruction

apply at least the chmod patch and follow the nice stright forward
instructions in FreeBSD-4.0/INST.FreeBSD-4.

On Fri, Aug 30, 2002 at 11:02:13PM +0200, Henrik Holmstam wrote:
> 
> On Fri, 30 Aug 2002, Marius Tomaschewski wrote:
> 
> > On Mon, Aug 26, 2002 at 11:04:23PM +0200, Henrik Holmstam wrote:
> > > Hello all,
> > >
> > > I'm having trouble getting transparent proxying working on my
> > > FreeBSD 4.6-STABLE machine. Non-transparent works fine with
> > > MagicChar.
> > >
> > > I'm using IPFilter v3.4.27 to redirect the packets.
> 
> I compiled with --enable-debug and tried, have attached the
> ftp-proxy.debug. Feel free to take a look if you have the time.

Does not show anything usefull - the natlook ioctl simply does
not find a match because of the byte order bug above...

Bye,
 Marius.
--
 ° --- Marius Tomaschewski <[email protected]>, Germany --- °
   The number of UNIX installations has grown to 10, with
   more expected.
   - The Unix Programmer's Manual, 2nd Edition, June 1972

--ikeVEW9yuYc//A+q
Content-Type: application/x-gunzip
Content-Disposition: attachment; filename="ip_fil3.4.29.INST_fix.dif.gz"
Content-Transfer-Encoding: base64

H4sICOQ2cj0CA2lwX2ZpbDMuNC4yOS5JTlNUX2ZpeC5kaWYAfY7BSsUwEEXXzVdculJi0iZt
LXZVRAQ3bupeEjpqaExK2of498aHPpAHbgZm7uHMFULArc8vzjeylfpGxuReq/tEdDvdiVbW
1cPj9CRPh2IyOyZaoTXU9aC6odPQda0Y5/yP6V/JIRwlUFD90PZDc5RoNo4Q3VUP/j3GkaHQ
EnNE+W4WggvbbrwXdpvLHAG4WFO0xvpPvJkNe4SljAdC3lKM+yUDE0UjkfLH8lSgWn5U5S/I
+DmVe59zyI9bCXtwfoZBoA8slAL5nHwB+64I4k0BAAA=

--ikeVEW9yuYc//A+q
Content-Type: application/x-gunzip
Content-Disposition: attachment; filename="ip_fil3.4.29.chmod_fix.dif.gz"
Content-Transfer-Encoding: base64

H4sICHkycj0CA2lwX2ZpbDMuNC4yOS5jaG1vZF9maXguZGlmAI2OMW+DMBSEZ+dX3MCQiBoD
QYmAhbYZuqBUSra2ilwwYIXYiBip/fc1clspUocOT+/07rvTo5RCDqdG9usgCeI00KNs2cNh
x0p+FvYsSKkV7qcWUYoozsJtFm0Qh2G88H3/JnsbO0wKBzEAESKbSbN15GJFARonm7stfLeK
YgHS6BESUs2Nlb4M3ATdd7sT6udyNdwIJ4dRf3xa+WoLyAyPvHUOn0wXdDlq7Uz2LhWrBnjL
4/55xTxPgk3XkUlV9VMtmBJG2mG5xSkh1Fs+PpX73QpJkvxN2ooZ9gn5NwtSayXsorLBC2gN
1p8voBy0gWxOcugDjTfkMJ1Q7nH7868z03PPF3Nmj5q1AQAA


--ikeVEW9yuYc//A+q
Content-Type: text/plain; charset=us-ascii

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
--ikeVEW9yuYc//A+q--