Why was CONFIG_NETFILTER_XT_TARGET_TPROXY Reverted from Asuswrt-Merlin Linux-2.6.36 Kernel?

[garycnew]

@RMerlin (Eric)

Curious as to why CONFIG_NETFILTER_XT_TARGET_TPROXY was reverted from the Asuswrt-Merlin Linux-2.6.36 kernel, yet retained in other Asuswrt-Merlin kernels?

Respectfully,


Gary

 

[bsdsource]

Commit

 

[garycnew]

Commit

@bsdsource

Ah... I see. It was removed from the config_base file and added to the Makefile for the Linux-2.3.36 kernel.

I missed that piece of information.

Thanks!


Gary

 

[garycnew]

Commit

@bsdsource

I attempted to add an iptables rule that uses -m socket, but it fails as though the Asuswrt-Merlin Linux-2.3.36 kernel wasn't compiled with CONFIG_NETFILTER_XT_TARGET_TPROXY support.

Respectfully,


Gary

 

[RMerlin]

Did you load the module?

admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# modprobe xt_TPROXY
admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# lsmod | grep TPROXY
xt_TPROXY                958  0 
nf_tproxy_core          1262  1 xt_TPROXY,[permanent]

 

[garycnew]

Did you load the module?

admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# modprobe xt_TPROXY
admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# lsmod | grep TPROXY
xt_TPROXY                958  0
nf_tproxy_core          1262  1 xt_TPROXY,[permanent]

@RMerlin

That was the problem. The xt_TPROXY and xt_socket kernel modules weren't loaded. I guess that's what I get for assuming that they were loaded by default.

Thank you for bringing the obvious to my attention.

With Great Respect,


Gary

 

[bhaji]

Did you load the module?

admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# modprobe xt_TPROXY
admin@rtac66b1:/lib/modules/2.6.36.4brcmarm/kernel/net# lsmod | grep TPROXY
xt_TPROXY                958  0
nf_tproxy_core          1262  1 xt_TPROXY,[permanent]

I just entered the codes above but only got the first line
xt_TPROXY xxx 0
How to fix it?thanks
PS: my router is AC-86U

 

[RMerlin]

I just entered the codes above but only got the first line
xt_TPROXY xxx 0
How to fix it?thanks
PS: my router is AC-86U

Different kernel. This thread is discussing kernel 2.6.36, your router runs kernel 4.1. That module does not exist on your router.

 

[garycnew]

Different kernel. This thread is discussing kernel 2.6.36, your router runs kernel 4.1. That module does not exist on your router.

@RMerlin

I thought I remember @Tech9 validating that these modules were still included and loaded with kernel-4.1 in the following thread:

https://www.snbforums.com/threads/a...t-time-machine-ipsec.76992/page-2#post-740571

Respectfully,


Gary

 

[RMerlin]

@RMerlin

I thought I remember @Tech9 validating that these modules were still included and loaded with kernel-4.1 in the following thread:

https://www.snbforums.com/threads/a...t-time-machine-ipsec.76992/page-2#post-740571

Respectfully,


Gary

xt_socket is not the same thing as nf_tproxy_core. The latter no longer even exists in the net/netfilter/ source code of 4.1.xx, there's nonly xt_TPROXY.

 

[garycnew]

xt_socket is not the same thing as nf_tproxy_core. The latter no longer even exists in the net/netfilter/ source code of 4.1.xx, there's nonly xt_TPROXY.

@Tech9

Did I misunderstand your response in the previously referenced post suggesting you were able to modprobe xt_socket and xt_tproxy on a kernel-4.1 device?

Respectfully,


Gary

 

[ColinTaylor]

@Tech9

Did I misunderstand your response in the previously referenced post suggesting you were able to modprobe xt_socket and xt_tproxy on a kernel-4.1 device?

Respectfully,


Gary

admin@RT-AX86U:/# uname -r
4.1.52
admin@RT-AX86U:/# modprobe xt_socket
admin@RT-AX86U:/# modprobe xt_TPROXY
admin@RT-AX86U:/# lsmod | grep xt_
xt_TPROXY               5057  0
xt_socket               3926  0

 

[Tech9]

Did I misunderstand your response

Not sure. You asked me to check something, I posted the result. It was months ago, I don't remember on AC86U or AX88U.

 

[garycnew]

admin@RT-AX86U:/# uname -r
4.1.52
admin@RT-AX86U:/# modprobe xt_socket
admin@RT-AX86U:/# modprobe xt_TPROXY
admin@RT-AX86U:/# lsmod | grep xt_
xt_TPROXY               5057  0
xt_socket               3926  0

@ColinTaylor - Thank you for confirming what @Tech9 previously verified.

@RMerlin - Have I misunderstood your point?

 

[ColinTaylor]

@RMerlin - Have I misunderstood your point?

I'm confused by why you're confused. RMerlin's reply was in response to post #7. In that post @bhaji said his output was different from RMerlin's output. He didn't have the nf_tproxy_core 1262 1 xt_TPROXY,[permanent] line. RMerlin explained why the nf_tproxy_core line was missing.

 

[garycnew]

I'm confused by why you're confused. RMerlin's reply was in response to post #7. In that post @bhaji said his output was different from RMerlin's output. He didn't have the nf_tproxy_core 1262 1 xt_TPROXY,[permanent] line. RMerlin explained why the nf_tproxy_core line was missing.

@ColinTaylor

That's what I get for not reading each post carefully.

Thank you for the clarification.

Respectfully,


Gary