Re: [PATCH?] Fix getorigdst() in ip_conntrack_core.c on 2.4.22-ac2

[dmorris <dmorris@metavize.com>]

>Would this work, or would it be horribly worse? Where can I get an app which uses
>SO_ORIGINAL_DST to test this out?
>
>  
>

Try this:

#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <unistd.h>
#include <string.h>
#include <linux/netfilter_ipv4.h>

int main ()
{
    int sock;
    int one = 1;
    struct sockaddr_in addr;
   
    if ((sock = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP))<0)
    {perror("socket()");exit(-1);}

    setsockopt(sock, SOL_SOCKET,SO_REUSEADDR,(char *)&one,sizeof(one));

    memset(&addr,0,sizeof(addr));
    addr.sin_port = htons(1234);
    addr.sin_family = AF_INET;
    addr.sin_addr.s_addr = htonl(INADDR_ANY);
    if (bind(sock, (struct sockaddr*)&addr, sizeof(addr))<0)
    {perror("bind()");exit(-1);}
 
    if (listen(sock, 3) < 0)
    {perror("listen()");exit(-1);}
   
    while(1) {
        int addrlen = sizeof(addr);
        int fd = accept(sock,(struct sockaddr*)&addr,&addrlen);
       
        if (fd < 0)
        {perror("accept()");exit(-1);}
      
        printf("accepted.");
       
        if (getsockopt(fd,SOL_IP,SO_ORIGINAL_DST,&addr,&addrlen)<0)
        {perror("getsockopt()");exit(-1);}

        printf("original dest: 
%s:%i\n",inet_ntoa(addr.sin_addr),ntohs(addr.sin_port));

        close(fd);
    }
   
}





then do:
s iptables -t nat -A PREROUTING -p tcp --destination-port 7 -j REDIRECT 
--to-port 1234

then from some machine behind that machine
"telnet 128.2.1.2 7"
Trying 128.2.1.2...
Connected to 128.2.1.2.
Escape character is '^]'.
Connection closed by foreign host.

the machine running the code above should print:
accepted.original dest: 128.2.1.2:7


and from the localmachine
telnet localhost 1234

the code should say:
accepted.original dest: 127.0.0.1:1234

goodluck,

-dirk morris