Compiling xt_TPROXY for ddwrt

It surprised me a bit that ddwrt (Kong build) is not shipped with xt_TPROXY.

Fortunately it’s possible to compile kernel modules for ddwrt and load them later.

The major steps are already explained in Compiling the xt_set.ko module, however I run into several issues that were not metioned in that post.

  1. I have to run make ARCH=arm prepare before makeing the source;

  2. Several private drivers are missing from ddwrt’s source tree, preventing make prepare from completing:

    I’m not quite familiar with Kconfig, so I simply remove the reference to those offending drivers from drivers/net/wireless/Kconfig.

  3. .config_northstar_smp is actually for Broadcom’s Northstar series chips, but yes, my router is using that series too.


The module can be loaded in ddwrt’s startup command with insmod.

You can get the module I compiled for Linux 4.4 here. Due to the instability of the kernel ABI, it’s likely that it won’t run on any other version of Linux. However, IT’S HIGHLY DISCOURAGED TO USE IT ON YOUR OWN ROUTER AS IT’S RUNNING IN SUPERVISOR MODE AND CAN DO ANYTHING HARMFUL to your router and your network. I post it here for my own backup. This module also contains my workaround for xt_TPROXY under 4.4 kernel, you may also apply the patch before compilation if you’d like (but please, REVIEW THE PATCH BEFORE APPLYING IT.).

Leave a Reply

Your email address will not be published.