synproxy

[leejir]

I wanted to know that which linux kernel version do you used for compiling synproxy？

[aarrpp]

3.2.39 from kernel.org and apply patch https://github.com/aarrpp/synproxy/blob/master/synproxy-xmit-3.2.39.patch

[leejir]

“synproxy.diff ”this patch isn't applied?just one "synproxy-xmit-3.2.39.patch" patch?

At 2013-06-10 17:20:29,"Pavel Arbuzov" [email protected] wrote:

3.2.39 from kernel.org and apply patch https://github.com/aarrpp/synproxy/blob/master/synproxy-xmit-3.2.39.patch

—
Reply to this email directly or view it on GitHub.

[aarrpp]

yes, just one synproxy-xmit-3.2.39.patch

[aarrpp]

yes, just one synproxy-xmit-3.2.39.patch

[leejir]

今天我编过去内核了，但是在以3.2.39内核启动后再编synproxy时还是编不过去，头文件好像不匹配，是不是还有哪里少掉的步骤？

在 2013-06-11 00:29:59，"Pavel Arbuzov" [email protected] 写道：

yes, just one synproxy-xmit-3.2.39.patch

—
Reply to this email directly or view it on GitHub.

[leejir]

well,are you a foreigner or chinese?Do you have a contact?Mail is too slow.

在 2013-06-11 00:29:59，"Pavel Arbuzov" [email protected] 写道：

yes, just one synproxy-xmit-3.2.39.patch

—
Reply to this email directly or view it on GitHub.

[aarrpp]

I do not speak Chinese. If you have any questions, please ask here.

[leejir]

OK ,now I have compilid 3.2.39 kernel,and it ok,but after reboot with 3.2.39 kernel to make in synproxy folder was failed,some structure member cannot be found,I have tried to find in 3.2.39 and 2.6.36,but nothing was there，so I think that there is someting patch hasn't been patched,not just "synproxy-xmit-3.2.39.patch".

在 2013-06-13 18:09:06，"Pavel Arbuzov" [email protected] 写道：

I do not speak Chinese. If you have any questions, please ask here.

—
Reply to this email directly or view it on GitHub.

[aarrpp]

I fixed the make file. Try again please.

[leejir]

OK，it works，but I have a question now,"path-to-iptables-shared-module" means which path?And "ipt_SYNPROXY.ko" this file don't be compilied,so this step "insmod ipt_SYNPROXY.ko" ?

在 2013-06-14 14:01:34，"Pavel Arbuzov" [email protected] 写道：

I fixed the make file. Try again please.

—
Reply to this email directly or view it on GitHub.

[aarrpp]

path-to-iptables-shared-module usually it is /lib/xtables/
no need to compile ipt_SYNPROXY.ko because it already compiled in kernel

[leejir]

Thanks!

At 2013-06-14 16:40:42,"Pavel Arbuzov" [email protected] wrote:

path-to-iptables-shared-module usually it is /lib/xtables/
no need to compile ipt_SYNPROXY.ko because it already compiled in kernel

—
Reply to this email directly or view it on GitHub.

[leejir]

I have a question that how can I found it works?Has anything log?

At 2013-06-14 16:40:42,"Pavel Arbuzov" [email protected] wrote:

path-to-iptables-shared-module usually it is /lib/xtables/
no need to compile ipt_SYNPROXY.ko because it already compiled in kernel

—
Reply to this email directly or view it on GitHub.

[aarrpp]

you can for example
hping3 --syn --flood -p 80 TARGET_IP
and show tcpdump -n port 80 on TARGET host

[huainansto]

can this patch run at centos 6.4 ? the kernel version is 2.6.32-220 - 2.6.32.358

[aarrpp]

I think no, but i don't try it.

[huainansto]

where can i get the 3.2.39 kernel source rpm?

[aarrpp]

https://www.kernel.org/pub/linux/kernel/v3.x/linux-3.2.39.tar.bz2

[NuxRo]

Made some RPMs for Centos6 c86_64:
http://li.nux.ro/download/nux/synproxy/