port forwarding

[Onepamopa]

seems like port-forwarding does not work with synsanity
any workarounds ?

[theojulienne]

@Onepamopa are you trying to use synsanity in front of a forwarded port, or on 2 separate ports? With a forwarded port (where iptables rewrites the packet and forwards to another host), it's not possible for synsanity to work because the host it's running on isn't the one generating the SYN cookie and SYN packet. In that case, you'll need to run synsanity on the backend host and set up the forwarding host in such a way that it can withstand the throughput of whatever sort of attack you're looking to mitigate.

[Onepamopa]

I'm trying to forward from port 80 to 8080 on the same server to the same destination IP based on whether or not the source IP exists in a table.