I normally successfully run sshuttle on a a small GN-MT300N-V2 router.
However I still encounter some problems with Signal.app, therefore I am trying --method=tproxy to enable UDP support.
iptables v1.8.7 (nf_tables): Couldn't load match `socket':No such file or directory
Try `iptables -h' or 'iptables --help' for more information.
fw: undoing changes.
root@GL-MT300N-V2:~# ip route add local default dev lo table 100
root@GL-MT300N-V2:~# ip rule add fwmark 0x01 lookup 100
root@GL-MT300N-V2:~# ip -6 route add local default dev lo table 100
root@GL-MT300N-V2:~# ip -6 rule add fwmark 0x01 lookup 100
root@GL-MT300N-V2:~# sshuttle --method=tproxy --listen 0.0.0.0:1445 --ns-host 192.168.7.1 -v -r [email protected] 0/0
Starting sshuttle proxy (version 1.3.1).
c : Starting firewall manager with command: ['/usr/bin/sshuttle', '-v', '--method', 'tproxy', '--firewall']
fw: Starting firewall with Python version 3.10.9
fw: ready method name tproxy.
c : IPv6 disabled by --disable-ipv6
c : Method: tproxy
c : IPv4: on
c : IPv6: off (available)
c : UDP : on
c : DNS : on
c : User: off (not available with tproxy method)
c : Subnets to forward through remote host (type, IP, cidr mask width, startPort, endPort):
c : (<AddressFamily.AF_INET: 2>, '0.0.0.0', 0, 0, 0)
c : Subnets to exclude from forwarding:
c : DNS requests normally directed at these servers will be redirected to remote:
c : (<AddressFamily.AF_INET: 2>, '192.168.7.1')
c : TCP redirector listening on ('0.0.0.0', 1445).
c : UDP redirector listening on ('0.0.0.0', 1445).
c : DNS listening on ('0.0.0.0', 12299).
c : Starting client with Python version 3.10.9
c : Connecting to server...
s: Running server on remote host with /usr/bin/python3 (version 3.7.3)
c : Connected to server.
s: latency control setting = True
s: auto-nets:False
fw: setting up.
# Warning: iptables-legacy tables present, use iptables-legacy to see them
# Warning: iptables-legacy tables present, use iptables-legacy to see them
# Warning: iptables-legacy tables present, use iptables-legacy to see them
fw: iptables -w -t mangle -N sshuttle-m-1445
fw: iptables -w -t mangle -F sshuttle-m-1445
fw: iptables -w -t mangle -N sshuttle-d-1445
fw: iptables -w -t mangle -F sshuttle-d-1445
fw: iptables -w -t mangle -N sshuttle-t-1445
fw: iptables -w -t mangle -F sshuttle-t-1445
fw: iptables -w -t mangle -I OUTPUT 1 -j sshuttle-m-1445
fw: iptables -w -t mangle -I PREROUTING 1 -j sshuttle-t-1445
fw: iptables -w -t mangle -A sshuttle-m-1445 -j MARK --set-mark 0x01 --dest 192.168.7.1/32 -m udp -p udp --dport 53
fw: iptables -w -t mangle -A sshuttle-t-1445 -j TPROXY --tproxy-mark 0x01 --dest 192.168.7.1/32 -m udp -p udp --dport 53 --on-port 12299
fw: iptables -w -t mangle -A sshuttle-t-1445 -j RETURN -m addrtype --dst-type LOCAL
fw: iptables -w -t mangle -A sshuttle-m-1445 -j RETURN -m addrtype --dst-type LOCAL
fw: iptables -w -t mangle -A sshuttle-d-1445 -j MARK --set-mark 0x01
fw: iptables -w -t mangle -A sshuttle-d-1445 -j ACCEPT
fw: iptables -w -t mangle -A sshuttle-t-1445 -m socket -j sshuttle-d-1445 -m tcp -p tcp
iptables v1.8.7 (nf_tables): Couldn't load match `socket':No such file or directory
Try `iptables -h' or 'iptables --help' for more information.
fw: undoing changes.
# Warning: iptables-legacy tables present, use iptables-legacy to see them
fw: iptables -w -t mangle -D OUTPUT -j sshuttle-m-1445
fw: iptables -w -t mangle -F sshuttle-m-1445
fw: iptables -w -t mangle -X sshuttle-m-1445
# Warning: iptables-legacy tables present, use iptables-legacy to see them
fw: iptables -w -t mangle -D PREROUTING -j sshuttle-t-1445
fw: iptables -w -t mangle -F sshuttle-t-1445
fw: iptables -w -t mangle -X sshuttle-t-1445
# Warning: iptables-legacy tables present, use iptables-legacy to see them
fw: iptables -w -t mangle -F sshuttle-d-1445
fw: iptables -w -t mangle -X sshuttle-d-1445
fw: fatal: ['iptables', '-w', '-t', 'mangle', '-A', 'sshuttle-t-1445', '-m', 'socket', '-j', 'sshuttle-d-1445', '-m', 'tcp', '-p', 'tcp'] returned 2
c : fatal: cleanup: ['/usr/bin/sshuttle', '-v', '--method', 'tproxy', '--firewall'] returned 99
root@GL-MT300N-V2:~#
I normally successfully run sshuttle on a a small GN-MT300N-V2 router.
However I still encounter some problems with Signal.app, therefore I am trying
--method=tproxyto enable UDP support.Everything seems ok until this error:
Here is the full trace: