libxt_TPROXY.man 1.1 KB

123456789101112131415161718192021
  1. This target is only valid in the \fBmangle\fP table, in the \fBPREROUTING\fP
  2. chain and user-defined chains which are only called from this chain. It
  3. redirects the packet to a local socket without changing the packet header in
  4. any way. It can also change the mark value which can then be used in advanced
  5. routing rules.
  6. It takes three options:
  7. .TP
  8. \fB\-\-on\-port\fP \fIport\fP
  9. This specifies a destination port to use. It is a required option, 0 means the
  10. new destination port is the same as the original. This is only valid if the
  11. rule also specifies \fB\-p tcp\fP or \fB\-p udp\fP.
  12. .TP
  13. \fB\-\-on\-ip\fP \fIaddress\fP
  14. This specifies a destination address to use. By default the address is the IP
  15. address of the incoming interface. This is only valid if the rule also
  16. specifies \fB\-p tcp\fP or \fB\-p udp\fP.
  17. .TP
  18. \fB\-\-tproxy\-mark\fP \fIvalue\fP[\fB/\fP\fImask\fP]
  19. Marks packets with the given value/mask. The fwmark value set here can be used
  20. by advanced routing. (Required for transparent proxying to work: otherwise
  21. these packets will get forwarded, which is probably not what you want.)