Talk:Siproxd

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 20:24, 29 September 2009 (edit)
Arpena (Talk | contribs)
(I found a way to transparent proxy the included milkfish/openser proxy)
← Previous diff
Current revision (20:25, 29 September 2009) (edit) (undo)
Arpena (Talk | contribs)
(I found a way to transparent proxy the included milkfish/openser proxy)
 
Line 11: Line 11:
iptables -t nat -A PREROUTING -p udp -i br0 --source 192.168.1.70 --dport 5060 -j REDIRECT iptables -t nat -A PREROUTING -p udp -i br0 --source 192.168.1.70 --dport 5060 -j REDIRECT
-The trick is that I'm only transparent proxying request from the ATA (192.168.1.70). Without this --source parameter milkfish doesn't work as it's own packages are being tranparent proxied to itself.+The trick is that I'm only transparent proxying request from the ATA (192.168.1.70). Without this --source parameter milkfish doesn't work as it's own packets are being tranparent proxied to itself.
The ATA address is an static DHCP lease so it doesn't change and the iptables command is added to the firewall startup in the administration panel so it is not lost on reboots/firewall changes. The ATA address is an static DHCP lease so it doesn't change and the iptables command is added to the firewall startup in the administration panel so it is not lost on reboots/firewall changes.
Hope this helps. Maybe we can polish this text so it is on the main article. Hope this helps. Maybe we can polish this text so it is on the main article.

Current revision

[edit] I found a way to transparent proxy the included milkfish/openser proxy

I have a VOIP provider supplied ATA and they won't allow me to change the outbound proxy configuration. So I looked at this page but didn't want to change milkfish to install siproxyd as I wanted the additional funtions of milkfish. So I tried and got the transparent proxy to work with milkfish.

My setup is:

ATA (192.168.1.70) <--> DD-WRT milkfish (192.168.1.1) <---> Internet

The iptables rule I added is:

iptables -t nat -A PREROUTING -p udp -i br0 --source 192.168.1.70 --dport 5060 -j REDIRECT

The trick is that I'm only transparent proxying request from the ATA (192.168.1.70). Without this --source parameter milkfish doesn't work as it's own packets are being tranparent proxied to itself.

The ATA address is an static DHCP lease so it doesn't change and the iptables command is added to the firewall startup in the administration panel so it is not lost on reboots/firewall changes.

Hope this helps. Maybe we can polish this text so it is on the main article.