diff options
| author | Maximilian Hils <git@maximilianhils.com> | 2016-02-15 23:00:11 +0100 |
|---|---|---|
| committer | Maximilian Hils <git@maximilianhils.com> | 2016-02-15 23:00:11 +0100 |
| commit | 87d9afcf2e257eee7c5aa08c3f0dc64da79b0647 (patch) | |
| tree | 71b10729d160f0269d02548d1ef9e183be1397d9 /docs/transparent/linux.rst | |
| parent | 36f34f701991b5d474c005ec45e3b66e20f326a8 (diff) | |
| parent | 3d9a5157e77b5a3237dc62994f4e3d4c75c2066e (diff) | |
| download | mitmproxy-87d9afcf2e257eee7c5aa08c3f0dc64da79b0647.tar.gz mitmproxy-87d9afcf2e257eee7c5aa08c3f0dc64da79b0647.tar.bz2 mitmproxy-87d9afcf2e257eee7c5aa08c3f0dc64da79b0647.zip | |
Merge pull request #937 from mhils/single-repo
Combine mitmproxy, pathod and netlib in a single repo.
Diffstat (limited to 'docs/transparent/linux.rst')
| -rw-r--r-- | docs/transparent/linux.rst | 45 |
1 files changed, 0 insertions, 45 deletions
diff --git a/docs/transparent/linux.rst b/docs/transparent/linux.rst deleted file mode 100644 index ce79128c..00000000 --- a/docs/transparent/linux.rst +++ /dev/null @@ -1,45 +0,0 @@ -.. _linux: - -Linux -===== - -On Linux, mitmproxy integrates with the iptables redirection mechanism to -achieve transparent mode. - - 1. :ref:`Install the mitmproxy certificate on the test device <certinstall>` - - 2. Enable IP forwarding: - - >>> sysctl -w net.ipv4.ip_forward=1 - - You may also want to consider enabling this permanently in ``/etc/sysctl.conf``. - - 3. If your target machine is on the same physical network and you configured it to use a custom - gateway, disable ICMP redirects: - - >>> echo 0 | sudo tee /proc/sys/net/ipv4/conf/*/send_redirects - - You may also want to consider enabling this permanently in ``/etc/sysctl.conf`` - as demonstrated `here <https://unix.stackexchange.com/a/58081>`_. - - 4. Create an iptables ruleset that redirects the desired traffic to the - mitmproxy port. Details will differ according to your setup, but the - ruleset should look something like this: - - .. code-block:: none - - iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080 - iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8080 - - 5. Fire up mitmproxy. You probably want a command like this: - - >>> mitmproxy -T --host - - The :option:`-T` flag turns on transparent mode, and the :option:`--host` - argument tells mitmproxy to use the value of the Host header for URL display. - - 6. Finally, configure your test device to use the host on which mitmproxy is - running as the default gateway. - - -For a detailed walkthrough, have a look at the :ref:`transparent-dhcp` tutorial. |
