Bug 604068 – net-proxy/sshuttle - missing kernel CONFIG_CHECK for ~IP_NF_MATCH_TTL

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Vladimir Pavljuchenkov (SpiderX) 2016-12-29 20:00:23 UTC]

In verbose mode sshuttle produces:

sshuttle: warning: your iptables is missing the ttl module.p


in linux.py:
def ipt_ttl(family, *args):
    global _no_ttl_module
    if not _no_ttl_module:
        # we avoid infinite loops by generating server-side connections
        # with ttl 42.  This makes the client side not recapture those
        # connections, in case client == server.
        try:
            argsplus = list(args) + ['-m', 'ttl', '!', '--ttl', '42']
            ipt(family, *argsplus)
        except Fatal:
            ipt(family, *args)
            # we only get here if the non-ttl attempt succeeds
            log('sshuttle: warning: your iptables is missing '
                'the ttl module.\n')
            _no_ttl_module = True
    else:
        ipt(family, *args)

I suggest to add ~IP_NF_MATCH_TTL to CONFIG_CHECK

[Comment 1 Tim Harder 2017-07-29 04:52:24 UTC]

Fixed in 0.78.3.