Redirect the traffic of one port to one chain with iptable?
On the raspberry Pi, I install the privoxy and a socks proxy software.
I want to redirect all the traffic to the chain REDSOCKS_FILTER. The traffic of tcp protocol of port 80 from all the traffic will go through the privoxy and then to the chain REDSOCKS_FILTER. In the chain REDSOCKS_FILTER, I will discard some local ip address and finally the processed traffic go to the socks proxy software.
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8118
iptables -t nat -A OUTPUT -p tcp --dport 8118 -j REDSOCKS_FILTER
iptables -t nat -A PREROUTING -p tcp -j REDSOCKS_FILTER
I try to write thease but the traffic of port 80 which go through privoxy cannot go to the REDSOCKS_FILTER chain.
But if I type
iptables -t nat -A OUTPUT -p tcp --dport 8118 -j REDSOCKS_FILTER
It seems that it can't work from my test and still has the same result. I am puzzled for what mistake I have made.
iptables iptables-redirect
edited 24 mins ago
Rui F Ribeiro
40.1k1479136
asked Mar 1 '16 at 15:19
jack_001jack_001
61
add a comment |
On the raspberry Pi, I install the privoxy and a socks proxy software.
I want to redirect all the traffic to the chain REDSOCKS_FILTER. The traffic of tcp protocol of port 80 from all the traffic will go through the privoxy and then to the chain REDSOCKS_FILTER. In the chain REDSOCKS_FILTER, I will discard some local ip address and finally the processed traffic go to the socks proxy software.
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8118
iptables -t nat -A OUTPUT -p tcp --dport 8118 -j REDSOCKS_FILTER
iptables -t nat -A PREROUTING -p tcp -j REDSOCKS_FILTER
I try to write thease but the traffic of port 80 which go through privoxy cannot go to the REDSOCKS_FILTER chain.
But if I type
iptables -t nat -A OUTPUT -p tcp --dport 8118 -j REDSOCKS_FILTER
It seems that it can't work from my test and still has the same result. I am puzzled for what mistake I have made.
iptables iptables-redirect
edited 24 mins ago
Rui F Ribeiro
40.1k1479136
asked Mar 1 '16 at 15:19
jack_001jack_001
61
add a comment |
On the raspberry Pi, I install the privoxy and a socks proxy software.
I want to redirect all the traffic to the chain REDSOCKS_FILTER. The traffic of tcp protocol of port 80 from all the traffic will go through the privoxy and then to the chain REDSOCKS_FILTER. In the chain REDSOCKS_FILTER, I will discard some local ip address and finally the processed traffic go to the socks proxy software.
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8118
iptables -t nat -A OUTPUT -p tcp --dport 8118 -j REDSOCKS_FILTER
iptables -t nat -A PREROUTING -p tcp -j REDSOCKS_FILTER
I try to write thease but the traffic of port 80 which go through privoxy cannot go to the REDSOCKS_FILTER chain.
But if I type
iptables -t nat -A OUTPUT -p tcp --dport 8118 -j REDSOCKS_FILTER
It seems that it can't work from my test and still has the same result. I am puzzled for what mistake I have made.
iptables iptables-redirect
edited 24 mins ago
Rui F Ribeiro
40.1k1479136
asked Mar 1 '16 at 15:19
jack_001jack_001
61
On the raspberry Pi, I install the privoxy and a socks proxy software.
I want to redirect all the traffic to the chain REDSOCKS_FILTER. The traffic of tcp protocol of port 80 from all the traffic will go through the privoxy and then to the chain REDSOCKS_FILTER. In the chain REDSOCKS_FILTER, I will discard some local ip address and finally the processed traffic go to the socks proxy software.
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8118
iptables -t nat -A OUTPUT -p tcp --dport 8118 -j REDSOCKS_FILTER
iptables -t nat -A PREROUTING -p tcp -j REDSOCKS_FILTER
I try to write thease but the traffic of port 80 which go through privoxy cannot go to the REDSOCKS_FILTER chain.
But if I type
iptables -t nat -A OUTPUT -p tcp --dport 8118 -j REDSOCKS_FILTER
It seems that it can't work from my test and still has the same result. I am puzzled for what mistake I have made.
iptables iptables-redirect
iptables iptables-redirect
edited 24 mins ago
Rui F Ribeiro
40.1k1479136
asked Mar 1 '16 at 15:19
jack_001jack_001
61
edited 24 mins ago
Rui F Ribeiro
40.1k1479136
asked Mar 1 '16 at 15:19
jack_001jack_001
61
edited 24 mins ago
Rui F Ribeiro
40.1k1479136
edited 24 mins ago
Rui F Ribeiro
40.1k1479136
edited 24 mins ago
Rui F Ribeiro
40.1k1479136
40.1k1479136
asked Mar 1 '16 at 15:19
jack_001jack_001
61
asked Mar 1 '16 at 15:19
jack_001jack_001
61
asked Mar 1 '16 at 15:19
jack_001jack_001
61
61
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f266799%2fredirect-the-traffic-of-one-port-to-one-chain-with-iptable%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f266799%2fredirect-the-traffic-of-one-port-to-one-chain-with-iptable%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
