* ipv6 tproxy / transparent proxy support?
@ 2010-10-26 17:48 Tomasz Chmielewski
2010-10-27 5:56 ` Amos Jeffries
0 siblings, 1 reply; 4+ messages in thread
From: Tomasz Chmielewski @ 2010-10-26 17:48 UTC (permalink / raw)
To: netfilter
What is the state of tproxy / transparent proxying (i.e. with Squid)
with ipv6?
As far as I can find in the documentation, I will need:
- a kernel which supports it,
- ip6tables which support it.
Is ipv6 transparent proxying available in stable iptables? If not,
perhaps I should get a daily snapshot?
What about the kernel? I guess I'll need these patches for the kernel
("[PATCH 0/9] tproxy: add IPv6 support" by Kovacs Krisztian)? Perhaps
something else?
http://thread.gmane.org/gmane.comp.security.firewalls.netfilter.devel/35841
--
Tomasz Chmielewski
http://wpkg.org
^ permalink raw reply [flat|nested] 4+ messages in thread* Re: ipv6 tproxy / transparent proxy support?
2010-10-26 17:48 ipv6 tproxy / transparent proxy support? Tomasz Chmielewski
@ 2010-10-27 5:56 ` Amos Jeffries
2010-10-27 8:12 ` Tomasz Chmielewski
0 siblings, 1 reply; 4+ messages in thread
From: Amos Jeffries @ 2010-10-27 5:56 UTC (permalink / raw)
To: Tomasz Chmielewski; +Cc: netfilter
On 27/10/10 06:48, Tomasz Chmielewski wrote:
> What is the state of tproxy / transparent proxying (i.e. with Squid)
> with ipv6?
The state?
* kernel - pending release
* iptables - patches queued for audit.
* squid - supported in 3.1 production releases.
I've just updated the squid wiki tproxy4 page with details and links to
the bits you need as of today.
AYJ
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: ipv6 tproxy / transparent proxy support?
2010-10-27 5:56 ` Amos Jeffries
@ 2010-10-27 8:12 ` Tomasz Chmielewski
2010-10-27 9:48 ` Amos Jeffries
0 siblings, 1 reply; 4+ messages in thread
From: Tomasz Chmielewski @ 2010-10-27 8:12 UTC (permalink / raw)
To: Amos Jeffries; +Cc: netfilter
On 27.10.2010 07:56, Amos Jeffries wrote:
> On 27/10/10 06:48, Tomasz Chmielewski wrote:
>> What is the state of tproxy / transparent proxying (i.e. with Squid)
>> with ipv6?
>
> The state?
>
> * kernel - pending release
> * iptables - patches queued for audit.
> * squid - supported in 3.1 production releases.
>
> I've just updated the squid wiki tproxy4 page with details and links to
> the bits you need as of today.
I see the page[1] contains command line iptables examples, but no
ip6tables ones. Do you know the syntax for ip6tables, and if so, could
you add an example to the squid wiki tproxy4 page as well?
[1] http://wiki.squid-cache.org/Features/Tproxy4
--
Tomasz Chmielewski
http://wpkg.org
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: ipv6 tproxy / transparent proxy support?
2010-10-27 8:12 ` Tomasz Chmielewski
@ 2010-10-27 9:48 ` Amos Jeffries
0 siblings, 0 replies; 4+ messages in thread
From: Amos Jeffries @ 2010-10-27 9:48 UTC (permalink / raw)
To: Tomasz Chmielewski; +Cc: netfilter
On 27/10/10 21:12, Tomasz Chmielewski wrote:
> On 27.10.2010 07:56, Amos Jeffries wrote:
>> On 27/10/10 06:48, Tomasz Chmielewski wrote:
>>> What is the state of tproxy / transparent proxying (i.e. with Squid)
>>> with ipv6?
>>
>> The state?
>>
>> * kernel - pending release
>> * iptables - patches queued for audit.
>> * squid - supported in 3.1 production releases.
>>
>> I've just updated the squid wiki tproxy4 page with details and links to
>> the bits you need as of today.
>
> I see the page[1] contains command line iptables examples, but no
> ip6tables ones. Do you know the syntax for ip6tables, and if so, could
> you add an example to the squid wiki tproxy4 page as well?
From what I've seen of the patches the demo config should be identical
save for the "6" in ip6tables command.
AYJ
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2010-10-27 9:48 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-10-26 17:48 ipv6 tproxy / transparent proxy support? Tomasz Chmielewski
2010-10-27 5:56 ` Amos Jeffries
2010-10-27 8:12 ` Tomasz Chmielewski
2010-10-27 9:48 ` Amos Jeffries
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).