Hide Forgot
Description of problem: When following the instructions on http://wiki.squid-cache.org/Features/Tproxy4 I get the following errors # ip6tables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT ip6tables v1.4.9: Couldn't load match `socket':/lib64/xtables/libip6t_socket.so: cannot open shared object file: No such file or directory Try `ip6tables -h' or 'ip6tables --help' for more information. # ip6tables -t mangle -A PREROUTING -p tcp --dport 80 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3129 ip6tables v1.4.9: unknown option `--tproxy-mark' I thought the necessary bits had been merged upstream ; please build them 2.6.37-0.rc5.git2.1.fc15.x86_64
Sounds like it's a userland issue. master@kernel:.% git grep TPROXY . (kyle@dreadnought:~/fedpkg/kernel) config-generic:CONFIG_NETFILTER_TPROXY=m config-generic:CONFIG_NETFILTER_XT_TARGET_TPROXY=m Re-assigning.
I would like to see this as well. I am seeing the same bugs.
iptables 1.4.11.1 should have support for it.
It would be good to have 1.4.11.1 in F15 then. I will be posting my World IPv6 Day results soon to Fedora-Devel, this is one of the few problems I had.
(In reply to comment #3) > iptables 1.4.11.1 should have support for it. can it be built then? it's been released a month and a half ago now
Fixed in rawhide in package iptables-1.4.11.1-1.fc16 or newer.
This really needs to be fixed in F15 as well.
Reopening due to missing requirements in the buildroot after build: iproute requires libxtables.so.5
Fixed in rawhide in rpm iptables-1.4.11.1-2.fc16 or newer. iproute has been updated, also.
Is this at all possible to get in FC15?