| lh | 9ed821d | 2023-04-07 01:36:19 -0700 | [diff] [blame] | 1 | This target is only valid in the \fBmangle\fR table, in the \fBPREROUTING\fR |
| 2 | chain and user-defined chains which are only called from this chain. It |
| 3 | redirects the packet to a local socket without changing the packet header in |
| 4 | any way. It can also change the mark value which can then be used in advanced |
| 5 | routing rules. |
| 6 | It takes three options: |
| 7 | .TP |
| 8 | \fB\-\-on\-port\fP \fIport\fP |
| 9 | This specifies a destination port to use. It is a required option, 0 means the |
| 10 | new destination port is the same as the original. This is only valid if the |
| 11 | rule also specifies \fB\-p tcp\fP or \fB\-p udp\fP. |
| 12 | .TP |
| 13 | \fB\-\-on\-ip\fP \fIaddress\fP |
| 14 | This specifies a destination address to use. By default the address is the IP |
| 15 | address of the incoming interface. This is only valid if the rule also |
| 16 | specifies \fB\-p tcp\fP or \fP\-p udp\fP. |
| 17 | .TP |
| 18 | \fB\-\-tproxy\-mark\fP \fIvalue\fP[\fB/\fP\fImask\fP] |
| 19 | Marks packets with the given value/mask. The fwmark value set here can be used |
| 20 | by advanced routing. (Required for transparent proxying to work: otherwise |
| 21 | these packets will get forwarded, which is probably not what you want.) |