Hi derek,

transparent mode in my build works the following way. Once transparent mode is activated there will be an iptables rule in nat chain that redirects all outgoing over br0 to privoxy.
This should work for common setups. But if someone has a setup e.g. without br0 or does not use nat feature, than this rule won't work and you have to manually create a redirecting rule specific for your setup.

A second problem could be if you are running custom firewall scripts, that delete my rule.

Anyways, even if you are creating custom rules to redirect client traffic to port 8118 on the router you still need to activate the option for transparent mode as this will also set accept-intercepted-requests to one otherwise privoxy will not accept redirects.

Ok, it seems like there is a bug somewhere.

Can you check the output of:

nvram get privoxy_transp_enable

it should be 1. If that is ok, then please call the privoxy startup script:

/etc/config/privoxy.startup

now check again if :

iptables -L -t nat

list the rule:

REDIRECT tcp -- anywhere anywhere tcp dpt:www redir ports 8118

Ok, download the updated builds: http://www.myopenrouter.com/forum/thread/31294/Kong-Mod-Update-build-17670/

This is probably a problem with the iptables script that does the country blocking. For iptables the ordering of rules is important. When a package comes in iptable will check the rules from top to button, if one rules says it's ok to pass, the rest of the rules will not be checked anymore and if one says to drop them it gets dropped without checking the other rules.

You can basically set the redirect rule for transparent mode in the script you use for country blocking, this would be the easiest way to influence the rule ordering.


To check what is wrong you can run:

iptables -L

iptables -L -t nat

I'd do this once after reboot, with transparent mode and once without you can then compare and check if there is some difference in ordering, besides the extra redirect rule that is inserted in transparent mode.