stunnel transparent proxying

I am trying to set up stunnel's transparent proxying feature (see http://www.stunnel.org/static/stunnel.html and look for "enable transparent proxy support on selected platforms").

This involves a number of iptables rules, including:

iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT

This gives the error "iptables: No chain/target/match by that name."

The error refers to the "-m socket" part of the rule. Is there any way to make this work on Linodes (I am using Debian 6 64bit) or is it not built into the kernel?

2 Replies

It looks like this requires CONFIGNETFILTERTPROXY, which is not compiled into Linode kernels, or at least not into 2.6.39.1-x86_64-linode19

http://www.linode.com/src/ doesn't seem to have source for Linode's builds of any kernel after 2.6.35, so I can't build the module myself.

Support tells me that their new kernels are built directly from kernel.org sources.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct