Log for
電訊台
@licson 我仲係搞唔掂點用wireguard做transparent proxy.....
wtf I need to type on peer A....
Chain PREROUTING (policy ACCEPT 279K packets, 210M bytes)
pkts bytes target prot opt in out source destination
425 35700 ACCEPT all -- * * 192.168.2.2 0.0.0.0/0
79 4739 MARK tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22222 MARK set 0x1
...
[saren@WTAKO ~ ]% sudo ip route show table 1
default via 192.168.2.2 dev wg0
192.168.2.0/24 dev wg0 scope link src 192.168.2.1
vim /etc/iproute2/rt_tables
32764: from all fwmark 0x1 lookup 1
你個 prerouting chain 應該係用 -m owner 嚟 match minecraft 個 process 喎
I am just testing if proxy/nat works
Client -> Proxy (Peer B) -> Server (Peer A): http server on 22222
proxy
Chain PREROUTING (policy ACCEPT 3819 packets, 319K bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- * * 192.168.2.1 0.0.0.0/0 tcp dpt:22222
33 1708 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25565 to:192.168.2.1:25565
21 4416 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2222 to:192.168.2.1:8080
34 2040 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22222 to:192.168.2.1
0 0 ACCEPT tcp -- wg0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22222
0 0 ACCEPT tcp -- wg0 * 0.0.0.0/0 0.0.0.0/0 tcp spt:22222
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:22222
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22222
should I fire up wireshark?
I am now using snat + dnat on proxy, ip rule + route on server
@licson have you encountered my case before?
I don't do these kinds of setup often
When I do I only used routing
i deleted my omv rock64 setup
windows 10 can read ext4 directly
我都係輕微hard reset咗openmediavault
force close virtualbox/vmware lor
i7 6500 8Gb but with 500gb hdd
and slow down my virtualbox too
係datacenter 帶客入場,開機櫃,幫手登記
no ah on9, me still neeed to study