| Jan Engelhardt | c6775d6 | 2010-07-23 21:23:05 +0200 | [diff] [blame] | 1 | This target is only valid in the \fBmangle\fP table, in the \fBPREROUTING\fP |
| KOVACS Krisztian | 92b54aa | 2008-10-15 11:49:37 +0200 | [diff] [blame] | 2 | chain and user-defined chains which are only called from this chain. It |
| 3 | redirects the packet to a local socket without changing the packet header in |
| 4 | any way. It can also change the mark value which can then be used in advanced |
| 5 | routing rules. |
| 6 | It takes three options: |
| 7 | .TP |
| Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 8 | \fB\-\-on\-port\fP \fIport\fP |
| KOVACS Krisztian | 92b54aa | 2008-10-15 11:49:37 +0200 | [diff] [blame] | 9 | This specifies a destination port to use. It is a required option, 0 means the |
| 10 | new destination port is the same as the original. This is only valid if the |
| Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 11 | rule also specifies \fB\-p tcp\fP or \fB\-p udp\fP. |
| KOVACS Krisztian | 92b54aa | 2008-10-15 11:49:37 +0200 | [diff] [blame] | 12 | .TP |
| Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 13 | \fB\-\-on\-ip\fP \fIaddress\fP |
| KOVACS Krisztian | 92b54aa | 2008-10-15 11:49:37 +0200 | [diff] [blame] | 14 | This specifies a destination address to use. By default the address is the IP |
| 15 | address of the incoming interface. This is only valid if the rule also |
| Jan Engelhardt | 18c475d | 2009-06-10 20:18:43 +0200 | [diff] [blame] | 16 | specifies \fB\-p tcp\fP or \fB\-p udp\fP. |
| KOVACS Krisztian | 92b54aa | 2008-10-15 11:49:37 +0200 | [diff] [blame] | 17 | .TP |
| Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 18 | \fB\-\-tproxy\-mark\fP \fIvalue\fP[\fB/\fP\fImask\fP] |
| KOVACS Krisztian | 92b54aa | 2008-10-15 11:49:37 +0200 | [diff] [blame] | 19 | Marks packets with the given value/mask. The fwmark value set here can be used |
| 20 | by advanced routing. (Required for transparent proxying to work: otherwise |
| 21 | these packets will get forwarded, which is probably not what you want.) |