From f47d89ff4e710f6d2df755fe526e91a5cf236cfa Mon Sep 17 00:00:00 2001 From: Aldo Cortesi Date: Mon, 27 Jan 2014 14:16:23 +1300 Subject: Revert "Move the doc tree out into its own repo." This reverts commit 8f88fcedd601c0033b4469b66626a83011879baf. --- doc-src/transparent/linux.html | 43 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 doc-src/transparent/linux.html (limited to 'doc-src/transparent/linux.html') diff --git a/doc-src/transparent/linux.html b/doc-src/transparent/linux.html new file mode 100644 index 00000000..96b7132a --- /dev/null +++ b/doc-src/transparent/linux.html @@ -0,0 +1,43 @@ +On Linux, mitmproxy integrates with the iptables redirection mechanism to +achieve transparent mode. + +
    + +
  1. Install the mitmproxy + certificates on the test device.
    2. + +
  2. Enable IP forwarding: + + 
    sysctl -w net.ipv4.ip_forward=1
    + + You may also want to consider enabling this permanently in + /etc/sysctl.conf. + +
    3. + +
  3. Create an iptables ruleset that redirects the desired traffic to the + mitmproxy port. Details will differ according to your setup, but the + ruleset should look something like this: + +
    iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080
+iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8080
    + +
    4. + +
  4. Fire up mitmproxy. You probably want a command like this: + + 
    mitmproxy -T --host
    + + The -T flag turns on transparent mode, and the --host + argument tells mitmproxy to use the value of the Host header for URL + display. + +
    5. + +
  5. Finally, configure your test device to use the host on which mitmproxy is + running as the default gateway.
    6. + +
+ + +For a detailed walkthrough, have a look at the Transparently proxify virtual machines tutorial. -- cgit v1.2.3