On 05/01/10 09:36, Mart Frauenlob wrote:
Besides the REDIRECT, there's also a newer target: TRPOXY -
http://www.balabit.com/downloads/files/tproxy/README.txt
I've read that, but I'm still not clear what TPROXY gives me that
REDIRECT doesn't, except that it seems more complex.
For example, I have
iptables -A PREROUTING -p tcp -m tcp ! --dport 3128 -j REDIRECT
--to-ports 3128
I don't need anything else, just a process listening on port 3128 that
knows what to do with redirected connections.
What would TPROXY give me that that doesn't?
jch
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html