Modify Linux transparent proxy docs to include ipv6 configuration.

This commit is contained in:
Aniket Panjwani 2018-02-04 10:42:03 -06:00
parent 91834f98cc
commit bb3e7ee86c

View File

@ -11,6 +11,7 @@ achieve transparent mode.
2. Enable IP forwarding:
>>> sysctl -w net.ipv4.ip_forward=1
>>> sysctl -w net.ipv6.conf.all.forwarding=1
You may also want to consider enabling this permanently in ``/etc/sysctl.conf`` or newly created ``/etc/sysctl.d/mitmproxy.conf``, see `here <https://superuser.com/a/625852>`__.
@ -18,6 +19,7 @@ achieve transparent mode.
gateway, disable ICMP redirects:
>>> sysctl -w net.ipv4.conf.all.accept_redirects=0
>>> sysctl -w net.ipv6.conf.all.accept_redirects=0
>>> sysctl -w net.ipv4.conf.all.send_redirects=0
   You may also want to consider enabling this permanently in ``/etc/sysctl.conf`` or a newly created ``/etc/sysctl.d/mitmproxy.conf``, see `here <https://superuser.com/a/625852>`__.
@ -30,6 +32,8 @@ achieve transparent mode.
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8080
ip6tables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080
ip6tables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8080
   You may also want to consider enabling this permanently with the ``iptables-persistent`` package, see `here <http://www.microhowto.info/howto/make_the_configuration_of_iptables_persistent_on_debian.html>`__.