: Is IP transparent proxy broken in 2.1.15 or does it just require a patch
: like the following to compile it?
Alas, it is broken. It will compile, but it will not work.
Your proxy sockets will receive successfully, but kernel
will reply with EINVAL to send.
It is pretty easy to fix, but I'd like to know,
for what useful purpose "transparent proxy" can be used?
I see no cases, where its functionality cannot be replaced
with masquerading/NAT.
Current "transparent proxy" code looks so ugly and inefficient,
that it has no rights to exist ( :-) it is not more than my personal opinion)
without serious modifications.
Alexey Kuznetsov.