From 09ccc4c4a3b67695295ad95f24b2f102d5f2fa1a Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Fri, 31 Jan 2014 12:59:35 -0500 Subject: Add support for TPROXY via new TransTPRoxy option Based on patch from "thomo" at #10582. --- doc/tor.1.txt | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'doc') diff --git a/doc/tor.1.txt b/doc/tor.1.txt index 28e7c5d7d..69452a02f 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -1183,6 +1183,19 @@ The following options are useful only for clients (that is, if compatibility, TransListenAddress is only allowed when TransPort is just a port number.) +[[TransTPROXY]] **TransTPROXY** **0**|**1**:: + TransTPROXY may only be enabled when there is transparent proxy listener + enabled and only for Linux. + + + Set this 1 if you wish to be able to use the TPROXY linux module to + transparently proxy connections that are configured using the TransPort + option. This setting lets the listener on the TransPort accept connections + for all addresses, even when the TransListenAddress is configured for an + internal address. Detailed information on how to configure the TPROXY + feature can be found in the Linux kernel source tree in the file + Documentation/networking/tproxy.txt. + (Default: 0) + [[NATDPort]] **NATDPort** \['address':]__port__|**auto** [_isolation flags_]:: Open this port to listen for connections from old versions of ipfw (as included in old versions of FreeBSD, etc) using the NATD protocol. -- cgit v1.2.3