Home » Mailing list archives » linux-kernel » 2010 » July » 10

Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw sockets

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Felipe W Damasio
Subject: Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw sockets
Date: Friday, July 9, 2010 - 8:18 pm

Hi Mr. Dumazet,

2010/7/9 Eric Dumazet <eric.dumazet@gmail.com>:

But do you think that the bug that squid triggered was caused by the
TProxy code?

Or is related to the network-stack in some other point.

I don't know if this helps, but I'm using ebtables to remove the
packets from the bridge, and iptables to redirect the traffic to
squid.

ebtables rules are:

-p IPv4 -i eth0 --ip-proto tcp --ip-dport 80 -j redirect  --redirect-target DROP
-p IPv4 -i eth1 --ip-proto tcp --ip-sport 80 -j redirect  --redirect-target DROP


iptables -t mangle -L -n is:

iptables -t mangle -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
DIVERT     tcp  --  0.0.0.0/0            0.0.0.0/0           socket
extrachain  tcp  --  0.0.0.0/0            0.0.0.0/0           tcp
dpt:80 ctstate NEW
TPROXY     tcp  --  0.0.0.0/0           !201.40.162.5        tcp
dpt:80 connmark match 0x0 TPROXY redirect 127.0.0.1:3127 mark 0x1/0x1
TPROXY     tcp  --  0.0.0.0/0           !201.40.162.5        tcp
dpt:80 connmark match 0x1 TPROXY redirect 127.0.0.1:3128 mark 0x1/0x1
TPROXY     tcp  --  0.0.0.0/0           !201.40.162.5        tcp
dpt:80 connmark match 0x2 TPROXY redirect 127.0.0.1:3129 mark 0x1/0x1

Chain DIVERT (1 references)
target     prot opt source               destination
MARK       all  --  0.0.0.0/0            0.0.0.0/0           MARK xset
0x1/0xffffffff
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0

Chain extrachain (1 references)
target     prot opt source               destination
CONNMARK   all  --  0.0.0.0/0            0.0.0.0/0           statistic
mode nth every 35 CONNMARK and 0x0
CONNMARK   all  --  0.0.0.0/0            0.0.0.0/0           statistic
mode nth every 35 packet 1 CONNMARK xset 0x1/0xffffffff
CONNMARK   all  --  0.0.0.0/0            0.0.0.0/0           statistic
mode nth every 35 packet 2 CONNMARK xset 0x2/0xffffffff

Don't know if the code on these can be traced back to tcp_recvmsg()
accessing some wrong memory address...

Cheers,

Felipe Damasio
--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
Squid hang up on 2.6.34, Felipe W Damasio, (Thu Jul 8, 12:03 pm)
Re: Squid hang up on 2.6.34, Felipe W Damasio, (Thu Jul 8, 2:30 pm)
Re: Squid hang up on 2.6.34, Eric Dumazet, (Thu Jul 8, 3:06 pm)
Re: Squid hang up on 2.6.34, Eric Dumazet, (Thu Jul 8, 3:08 pm)
Re: Squid hang up on 2.6.34, Felipe W Damasio, (Fri Jul 9, 8:03 am)
Re: Squid hang up on 2.6.34, Felipe W Damasio, (Fri Jul 9, 9:03 am)
[PATCH] tproxy: nf_tproxy_assign_sock() can handle tw sockets, Eric Dumazet, (Fri Jul 9, 10:13 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., David Miller, (Fri Jul 9, 10:53 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Fri Jul 9, 11:16 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Fri Jul 9, 8:18 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Eric Dumazet, (Fri Jul 9, 11:17 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., David Miller, (Sat Jul 10, 12:30 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Sat Jul 10, 8:11 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Avi Kivity, (Sat Jul 10, 10:19 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Sun Jul 11, 12:11 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Sun Jul 11, 12:13 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Eric Dumazet, (Sun Jul 11, 1:02 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Eric Dumazet, (Sun Jul 11, 1:36 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Sun Jul 11, 5:52 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Mon Jul 12, 11:49 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Tue Jul 13, 7:24 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Eric Dumazet, (Tue Jul 13, 7:40 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Tue Jul 13, 7:49 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Eric Dumazet, (Tue Jul 13, 8:49 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Tue Jul 13, 1:55 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Tue Jul 13, 2:06 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Eric Dumazet, (Tue Jul 13, 8:21 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Tue Jul 13, 8:27 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Eric Dumazet, (Tue Jul 13, 8:43 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Tue Jul 13, 8:51 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Bill Fink, (Tue Jul 13, 11:56 pm)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Patrick McHardy, (Wed Jul 14, 4:41 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Felipe W Damasio, (Fri Jul 16, 8:41 am)
Re: [PATCH] tproxy: nf_tproxy_assign_sock() can handle tw ..., Eric Dumazet, (Fri Jul 16, 8:52 am)