Setting up a transparent proxy with only one box.

Posted by Scott Chamberlain on Server Fault See other posts from Server Fault or by Scott Chamberlain
Published on 2010-03-23T02:58:46Z Indexed on 2010/03/23 17:13 UTC
Read the original article Hit count: 208

Filed under:
|
|
|

I am playing around with transparent proxies, unfortunately I do not have two machines to test it out with. The current way I am doing things is the program makes a request to a computer on port 80, I use

iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j REDIRECT --to-port 1234

to redirect to my proxy that I am playing with. the proxy will send out a request to port 81 (as all outbound port 80 are being fed back in to the proxy so I want to do something like

iptables -t nat -A OUTPUT -p tcp --destination-port 81 -j DNAT --to-destination xxxx:80

The problem lies with the xxxx part. How do I change the destination port without changing changing the destination ip? Or am I doing this setup completely wrong, I am learning after all and constructive criticism is definitely appreciated.

The machine I am using is pretty low end so I would like not not have to create a VM with a second box unless absolutely necessary.

© Server Fault or respective owner

Related posts about iptables

Related posts about nat