What's new

Why was CONFIG_NETFILTER_XT_TARGET_TPROXY Reverted from Asuswrt-Merlin Linux-2.6.36 Kernel?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

garycnew

Senior Member
@RMerlin (Eric)

Curious as to why CONFIG_NETFILTER_XT_TARGET_TPROXY was reverted from the Asuswrt-Merlin Linux-2.6.36 kernel, yet retained in other Asuswrt-Merlin kernels?

Respectfully,


Gary
 
@bsdsource

I attempted to add an iptables rule that uses -m socket, but it fails as though the Asuswrt-Merlin Linux-2.3.36 kernel wasn't compiled with CONFIG_NETFILTER_XT_TARGET_TPROXY support.

Respectfully,


Gary
 
Did you load the module?

Code:
admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# modprobe xt_TPROXY
admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# lsmod | grep TPROXY
xt_TPROXY                958  0 
nf_tproxy_core          1262  1 xt_TPROXY,[permanent]
 
Did you load the module?

Code:
admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# modprobe xt_TPROXY
admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# lsmod | grep TPROXY
xt_TPROXY                958  0
nf_tproxy_core          1262  1 xt_TPROXY,[permanent]

@RMerlin

That was the problem. The xt_TPROXY and xt_socket kernel modules weren't loaded. I guess that's what I get for assuming that they were loaded by default.

Thank you for bringing the obvious to my attention.

With Great Respect,


Gary
 
Did you load the module?

Code:
admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# modprobe xt_TPROXY
admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# lsmod | grep TPROXY
xt_TPROXY                958  0
nf_tproxy_core          1262  1 xt_TPROXY,[permanent]
I just entered the codes above but only got the first line
xt_TPROXY xxx 0
How to fix it?thanks
PS: my router is AC-86U
 
I just entered the codes above but only got the first line
xt_TPROXY xxx 0
How to fix it?thanks
PS: my router is AC-86U
Different kernel. This thread is discussing kernel 2.6.36, your router runs kernel 4.1. That module does not exist on your router.
 
xt_socket is not the same thing as nf_tproxy_core. The latter no longer even exists in the net/netfilter/ source code of 4.1.xx, there's nonly xt_TPROXY.

@Tech9

Did I misunderstand your response in the previously referenced post suggesting you were able to modprobe xt_socket and xt_tproxy on a kernel-4.1 device?

Respectfully,


Gary
 
@Tech9

Did I misunderstand your response in the previously referenced post suggesting you were able to modprobe xt_socket and xt_tproxy on a kernel-4.1 device?

Respectfully,


Gary

Code:
admin@RT-AX86U:/# uname -r
4.1.52
admin@RT-AX86U:/# modprobe xt_socket
admin@RT-AX86U:/# modprobe xt_TPROXY
admin@RT-AX86U:/# lsmod | grep xt_
xt_TPROXY               5057  0
xt_socket               3926  0
 
Code:
admin@RT-AX86U:/# uname -r
4.1.52
admin@RT-AX86U:/# modprobe xt_socket
admin@RT-AX86U:/# modprobe xt_TPROXY
admin@RT-AX86U:/# lsmod | grep xt_
xt_TPROXY               5057  0
xt_socket               3926  0

@ColinTaylor - Thank you for confirming what @Tech9 previously verified.

@RMerlin - Have I misunderstood your point?
 
@RMerlin - Have I misunderstood your point?
I'm confused by why you're confused. RMerlin's reply was in response to post #7. In that post @bhaji said his output was different from RMerlin's output. He didn't have the nf_tproxy_core 1262 1 xt_TPROXY,[permanent] line. RMerlin explained why the nf_tproxy_core line was missing.
 
I'm confused by why you're confused. RMerlin's reply was in response to post #7. In that post @bhaji said his output was different from RMerlin's output. He didn't have the nf_tproxy_core 1262 1 xt_TPROXY,[permanent] line. RMerlin explained why the nf_tproxy_core line was missing.

@ColinTaylor

That's what I get for not reading each post carefully.

Thank you for the clarification.

Respectfully,


Gary
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top