Skip to content

iptables v1.8.7 (nf_tables): Couldn't load match socket':No such file or directory` with method tproxy #1047

@grepsuzette

Description

@grepsuzette

I normally successfully run sshuttle on a a small GN-MT300N-V2 router.
However I still encounter some problems with Signal.app, therefore I am trying --method=tproxy to enable UDP support.

Everything seems ok until this error:

iptables v1.8.7 (nf_tables): Couldn't load match `socket':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
fw: undoing changes.

Here is the full trace:

root@GL-MT300N-V2:~# ip route add local default dev lo table 100
root@GL-MT300N-V2:~# ip rule add fwmark 0x01 lookup 100
root@GL-MT300N-V2:~# ip -6 route add local default dev lo table 100
root@GL-MT300N-V2:~# ip -6 rule add fwmark 0x01 lookup 100

root@GL-MT300N-V2:~# sshuttle --method=tproxy --listen 0.0.0.0:1445 --ns-host 192.168.7.1 -v -r [email protected] 0/0
Starting sshuttle proxy (version 1.3.1).
c : Starting firewall manager with command: ['/usr/bin/sshuttle', '-v', '--method', 'tproxy', '--firewall']
fw: Starting firewall with Python version 3.10.9
fw: ready method name tproxy.
c : IPv6 disabled by --disable-ipv6
c : Method: tproxy
c : IPv4: on
c : IPv6: off (available)
c : UDP : on
c : DNS : on
c : User: off (not available with tproxy method)
c : Subnets to forward through remote host (type, IP, cidr mask width, startPort, endPort):
c :   (<AddressFamily.AF_INET: 2>, '0.0.0.0', 0, 0, 0)
c : Subnets to exclude from forwarding:
c : DNS requests normally directed at these servers will be redirected to remote:
c :   (<AddressFamily.AF_INET: 2>, '192.168.7.1')
c : TCP redirector listening on ('0.0.0.0', 1445).
c : UDP redirector listening on ('0.0.0.0', 1445).
c : DNS listening on ('0.0.0.0', 12299).
c : Starting client with Python version 3.10.9
c : Connecting to server...
 s: Running server on remote host with /usr/bin/python3 (version 3.7.3)
c : Connected to server.
 s: latency control setting = True
 s: auto-nets:False
fw: setting up.
# Warning: iptables-legacy tables present, use iptables-legacy to see them
# Warning: iptables-legacy tables present, use iptables-legacy to see them
# Warning: iptables-legacy tables present, use iptables-legacy to see them
fw: iptables -w -t mangle -N sshuttle-m-1445
fw: iptables -w -t mangle -F sshuttle-m-1445
fw: iptables -w -t mangle -N sshuttle-d-1445
fw: iptables -w -t mangle -F sshuttle-d-1445
fw: iptables -w -t mangle -N sshuttle-t-1445
fw: iptables -w -t mangle -F sshuttle-t-1445
fw: iptables -w -t mangle -I OUTPUT 1 -j sshuttle-m-1445
fw: iptables -w -t mangle -I PREROUTING 1 -j sshuttle-t-1445
fw: iptables -w -t mangle -A sshuttle-m-1445 -j MARK --set-mark 0x01 --dest 192.168.7.1/32 -m udp -p udp --dport 53
fw: iptables -w -t mangle -A sshuttle-t-1445 -j TPROXY --tproxy-mark 0x01 --dest 192.168.7.1/32 -m udp -p udp --dport 53 --on-port 12299
fw: iptables -w -t mangle -A sshuttle-t-1445 -j RETURN -m addrtype --dst-type LOCAL
fw: iptables -w -t mangle -A sshuttle-m-1445 -j RETURN -m addrtype --dst-type LOCAL
fw: iptables -w -t mangle -A sshuttle-d-1445 -j MARK --set-mark 0x01
fw: iptables -w -t mangle -A sshuttle-d-1445 -j ACCEPT
fw: iptables -w -t mangle -A sshuttle-t-1445 -m socket -j sshuttle-d-1445 -m tcp -p tcp
iptables v1.8.7 (nf_tables): Couldn't load match `socket':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
fw: undoing changes.
# Warning: iptables-legacy tables present, use iptables-legacy to see them
fw: iptables -w -t mangle -D OUTPUT -j sshuttle-m-1445
fw: iptables -w -t mangle -F sshuttle-m-1445
fw: iptables -w -t mangle -X sshuttle-m-1445
# Warning: iptables-legacy tables present, use iptables-legacy to see them
fw: iptables -w -t mangle -D PREROUTING -j sshuttle-t-1445
fw: iptables -w -t mangle -F sshuttle-t-1445
fw: iptables -w -t mangle -X sshuttle-t-1445
# Warning: iptables-legacy tables present, use iptables-legacy to see them
fw: iptables -w -t mangle -F sshuttle-d-1445
fw: iptables -w -t mangle -X sshuttle-d-1445
fw: fatal: ['iptables', '-w', '-t', 'mangle', '-A', 'sshuttle-t-1445', '-m', 'socket', '-j', 'sshuttle-d-1445', '-m', 'tcp', '-p', 'tcp'] returned 2
c : fatal: cleanup: ['/usr/bin/sshuttle', '-v', '--method', 'tproxy', '--firewall'] returned 99
root@GL-MT300N-V2:~#

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions