[tor-bugs] #10582 [Tor]: Please add support for TPROXY for linux in TransProxy

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Jan 7 22:51:21 UTC 2014


#10582: Please add support for TPROXY for linux in TransProxy
--------------------+---------------------
 Reporter:  thomo   |          Owner:
     Type:  defect  |         Status:  new
 Priority:  normal  |      Milestone:
Component:  Tor     |        Version:
 Keywords:          |  Actual Points:
Parent ID:          |         Points:
--------------------+---------------------
 The TPROXY target on linux is pretty much the same as the current
 TransProxy but with the exception that the local port isn't visible
 therefore making it possible to transparently map the entire range of
 1:65356 to tor.

 The only difference between the current TransProxy implementation is the
 addition to listen for all addresses on the stock. I attach a patch that
 does this. Binding for all addresses has no effect when you use NAT to
 redirect a port to given address, so it is quite a small change.

 TOR needs root or some capablitlity to setsockopt with SOL_IP
 IP_TRANSPARENT, but apart from that the change is trivial.


 This patch has been tested with with the nat rule as well TPROXY target
 and works for both .onion sites using AutoResolv also.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10582>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list