Skip to content

S
sshuttle
Commit e433c599 authored by Brian May's avatar Brian May
Browse files
Options

IPv6 routes must be added manually

parent ba60d224
Show whitespace changes
Inline Side-by-side
Showing with 4 additions and 1 deletion
README.rst
View file @ e433c599
...@@ -80,6 +80,9 @@ There are some things you need to consider for TPROXY to work: ...@@ -80,6 +80,9 @@ There are some things you need to consider for TPROXY to work:
ip -6 route add local default dev lo table 100 ip -6 route add local default dev lo table 100
ip -6 rule add fwmark 1 lookup 100 ip -6 rule add fwmark 1 lookup 100
- The --auto-nets feature does not detect IPv6 routes automatically. Add IPv6
routes manually. e.g. by adding '::/0' to the end of the command line.
- The client needs to be run as root. e.g.:: - The client needs to be run as root. e.g.::
sudo SSH_AUTH_SOCK="$SSH_AUTH_SOCK" $HOME/tree/sshuttle.tproxy/sshuttle --method=tproxy ... sudo SSH_AUTH_SOCK="$SSH_AUTH_SOCK" $HOME/tree/sshuttle.tproxy/sshuttle --method=tproxy ...
...@@ -90,7 +93,7 @@ There are some things you need to consider for TPROXY to work: ...@@ -90,7 +93,7 @@ There are some things you need to consider for TPROXY to work:
- Similarly, UDP return packets (including DNS) could get intercepted and - Similarly, UDP return packets (including DNS) could get intercepted and
bounced back. This is the case if you have a broad subnet such as bounced back. This is the case if you have a broad subnet such as
``0.0.0.0/0`` that includes the IP address of the client. Use the ``0.0.0.0/0`` or ``::/0`` that includes the IP address of the client. Use the
`--exclude` parameter for this. `--exclude` parameter for this.
- You do need the `--method=tproxy` parameter, as above. - You do need the `--method=tproxy` parameter, as above.
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment