On 20/03/2012 6:31 p.m., Vishal Agarwal wrote:
Hi Amos, You are right. Will this work with transferring all the traffic to http port from iptables ? Iptables -t nat -A PREROUTING -s 192.168.1.0/24 -p tcp --dport 80 -j REDIRECT --to-destination serverip:3128
REDIRECT takes a port, and assigns the traffic to the box primary IP at that port. If you want to specify particular IP:port use DNAT.
However, port-443 traffic does not flow over port-80 and is a very different beasty for intercept to deal with considering all that TLS armour.
Amos
