Enable CONFIG_IP_NF_TARGET_REDIRECT and CONFIG_NETFILTER_TPROXY in the ChromeOS ARM kernel
Reported by
catalin....@gmail.com,
Jul 20 2016
|
||||
Issue descriptionUserAgent: Mozilla/5.0 (X11; CrOS armv7l 8172.62.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 Platform: 8172.62.0 (Official Build) stable-channel daisy Steps to reproduce the problem: 1. Enter the shell (developer mode) 2. sudo modprobe configs 3. zcat /proc/config.gz | grep "\(REDIRECT\|TPROXY\)" It shows they are disabled. What is the expected behavior? "sudo modprobe ipt_REDIRECT" would allow VPN over SSH with tools like sshuttle. Without this kernel module/feature, "iptables -t nat -j REDIRECT" fails with "iptables: No chain/target/match by that name." TPROXY would be a bonus but at least maybe we can get REDIRECT enabled in the default ChromeOS kernel. What went wrong? Nothing wrong, just a useful feature (see the "expected behaviour" explanation). Did this work before? No Chrome version: 51.0.2704.106 Channel: stable OS Version: 8172.62.0 Flash Version: Shockwave Flash 22.0 r0 Thank you in advance.
,
Feb 17 2017
,
Mar 18 2017
Activating. Please assign to the right owner and the appropriate priority.
,
Apr 12 2018
This issue has been Available for over a year. If it's no longer important or seems unlikely to be fixed, please consider closing it out. If it is important, please re-triage the issue. Sorry for the inconvenience if the bug really should have been left as Available. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
||||
►
Sign in to add a comment |
||||
Comment 1 by dhadd...@chromium.org
, Jul 26 2016