xref: /aosp_15_r20/external/iptables/extensions/libxt_TPROXY.man (revision a71a954618bbadd4a345637e5edcf36eec826889)
1*a71a9546SAutomerger Merge WorkerThis target is only valid in the \fBmangle\fP table, in the \fBPREROUTING\fP
2*a71a9546SAutomerger Merge Workerchain and user-defined chains which are only called from this chain. It
3*a71a9546SAutomerger Merge Workerredirects the packet to a local socket without changing the packet header in
4*a71a9546SAutomerger Merge Workerany way. It can also change the mark value which can then be used in advanced
5*a71a9546SAutomerger Merge Workerrouting rules.
6*a71a9546SAutomerger Merge WorkerIt takes three options:
7*a71a9546SAutomerger Merge Worker.TP
8*a71a9546SAutomerger Merge Worker\fB\-\-on\-port\fP \fIport\fP
9*a71a9546SAutomerger Merge WorkerThis specifies a destination port to use. It is a required option, 0 means the
10*a71a9546SAutomerger Merge Workernew destination port is the same as the original. This is only valid if the
11*a71a9546SAutomerger Merge Workerrule also specifies \fB\-p tcp\fP or \fB\-p udp\fP.
12*a71a9546SAutomerger Merge Worker.TP
13*a71a9546SAutomerger Merge Worker\fB\-\-on\-ip\fP \fIaddress\fP
14*a71a9546SAutomerger Merge WorkerThis specifies a destination address to use. By default the address is the IP
15*a71a9546SAutomerger Merge Workeraddress of the incoming interface. This is only valid if the rule also
16*a71a9546SAutomerger Merge Workerspecifies \fB\-p tcp\fP or \fB\-p udp\fP.
17*a71a9546SAutomerger Merge Worker.TP
18*a71a9546SAutomerger Merge Worker\fB\-\-tproxy\-mark\fP \fIvalue\fP[\fB/\fP\fImask\fP]
19*a71a9546SAutomerger Merge WorkerMarks packets with the given value/mask. The fwmark value set here can be used
20*a71a9546SAutomerger Merge Workerby advanced routing. (Required for transparent proxying to work: otherwise
21*a71a9546SAutomerger Merge Workerthese packets will get forwarded, which is probably not what you want.)
22