[LARTC] Transparent FTP proxying from localhost?

[LARTC] Transparent FTP proxying from localhost?

[Artūras Šlajus]

Hi. I need to do transparent FTP proxying using frox. For my lan i just use:

     if [ "$USE_FTP_PROXY" = "yes" ]; then
         $IPT -t nat -A PREROUTING -p tcp -i $LAN -d ! $INET_IP --dport 21 \
           -j REDIRECT --to-port $FTP_PROXY_PORT
     fi

I wonder what i should use for same effect on localhost.

         $IPT -t nat -A OUTPUT -p tcp -o $INET -d ! $INET_IP --dport 21 \
           -j REDIRECT --to-port $FTP_PROXY_PORT

didn't worked :(

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

RE: [LARTC] Transparent FTP proxying from localhost?

[arek]

> I wonder what i should use for same effect on localhost.
>
>          $IPT -t nat -A OUTPUT -p tcp -o $INET -d ! $INET_IP --dport 21 \
>            -j REDIRECT --to-port $FTP_PROXY_PORT

Your local packets don't go via nat and prerouting table.

Hope you should enable in kernel NAT_OF_LOCAL_CONNECTIONS (experimental) .
Then you will be able to specify some policy.

Arkadiusz Binder

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/