From: Pierluigi Frullani Sinergy <p.frullani@sinergy.it>
To: "netfilter@vger.kernel.org" <netfilter@vger.kernel.org>
Subject: Re: Trouble getting SYNPROXY to work.
Date: Tue, 12 Nov 2019 21:42:59 +0100 [thread overview]
Message-ID: <13941443.1yEmWJ4apE@topolinux> (raw)
In-Reply-To: <20191112142326.2ad4acf3@playground>
Neal,
> > root@firewall:~# ifconfig br0
> > br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
> > inet 10.0.1.51 netmask 255.255.255.0 broadcast 10.0.2.255
> Broadcast address doesn't match address/mask. Fix and verify you have no other config errors.
Easy fix:
root@firewall:~# ifconfig br0
br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 10.0.1.51 netmask 255.255.255.0 broadcast 10.0.1.255
inet6 fe80::44b9:4bff:fe81:89e2 prefixlen 64 scopeid 0x20<link>
but still no joy:
root@firewall:~# tcpdump -n -i any port 82 <==== Here I'm using "any" to be sure no routing problems.
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
21:40:58.520154 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805112532 ecr 0,nop,wscale 7], length 0
21:40:58.520154 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805112532 ecr 0,nop,wscale 7], length 0
21:40:59.585539 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805113594 ecr 0,nop,wscale 7], length 0
21:40:59.585539 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805113594 ecr 0,nop,wscale 7], length 0
21:41:01.630401 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805115642 ecr 0,nop,wscale 7], length 0
21:41:01.630401 IP 10.0.1.18.34488 > 10.0.1.51.82: Flags [S], seq 900706808, win 29200, options [mss 1323,sackOK,TS val 2805115642 ecr 0,nop,wscale 7], length 0
Still banging my head on the wall :(
Thx
Pierluigi
prev parent reply other threads:[~2019-11-12 20:42 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-11-11 20:46 Trouble getting SYNPROXY to work Pigi
2019-11-12 8:37 ` Fatih USTA
2019-11-12 18:31 ` Pigi
2019-11-12 19:23 ` Neal P. Murphy
2019-11-12 20:42 ` Pierluigi Frullani Sinergy [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=13941443.1yEmWJ4apE@topolinux \
--to=p.frullani@sinergy.it \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox