From: Pierluigi Frullani Sinergy <p.frullani@sinergy.it>
To: "netfilter@vger.kernel.org" <netfilter@vger.kernel.org>
Subject: Re: Trouble getting SYNPROXY to work.
Date: Tue, 12 Nov 2019 21:42:59 +0100 [thread overview]
Message-ID: <13941443.1yEmWJ4apE@topolinux> (raw)
In-Reply-To: <20191112142326.2ad4acf3@playground>
Neal,
> > root@firewall:~# ifconfig br0
> > br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
> > inet 10.0.1.51 netmask 255.255.255.0 broadcast 10.0.2.255
> Broadcast address doesn't match address/mask. Fix and verify you have no other config errors.
Easy fix:
root@firewall:~# ifconfig br0
br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 10.0.1.51 netmask 255.255.255.0 broadcast 10.0.1.255
inet6 fe80::44b9:4bff:fe81:89e2 prefixlen 64 scopeid 0x20<link>
but still no joy:
root@firewall:~# tcpdump -n -i any port 82 <==== Here I'm using "any" to be sure no routing problems.
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
21:40:58.520154 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805112532 ecr 0,nop,wscale 7], length 0
21:40:58.520154 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805112532 ecr 0,nop,wscale 7], length 0
21:40:59.585539 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805113594 ecr 0,nop,wscale 7], length 0
21:40:59.585539 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805113594 ecr 0,nop,wscale 7], length 0
21:41:01.630401 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805115642 ecr 0,nop,wscale 7], length 0
21:41:01.630401 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805115642 ecr 0,nop,wscale 7], length 0
Still banging my head on the wall :(
Thx
Pierluigi
prev parent reply other threads:[~2019-11-12 20:42 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-11-11 20:46 Trouble getting SYNPROXY to work Pigi
2019-11-12 8:37 ` Fatih USTA
2019-11-12 18:31 ` Pigi
2019-11-12 19:23 ` Neal P. Murphy
2019-11-12 20:42 ` Pierluigi Frullani Sinergy [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=13941443.1yEmWJ4apE@topolinux \
--to=p.frullani@sinergy.it \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.