mirror of
https://github.com/Grasscutters/mitmproxy.git
synced 2024-11-27 10:26:23 +00:00
66 lines
2.1 KiB
ReStructuredText
66 lines
2.1 KiB
ReStructuredText
.. _linux:
|
|
|
|
Linux
|
|
=====
|
|
|
|
On Linux, mitmproxy integrates with the iptables redirection mechanism to
|
|
achieve transparent mode.
|
|
|
|
1. :ref:`Install the mitmproxy certificate on the test device <certinstall>`
|
|
|
|
2. Enable IP forwarding:
|
|
|
|
>>> sysctl -w net.ipv4.ip_forward=1
|
|
|
|
You may also want to consider enabling this permanently in ``/etc/sysctl.conf``.
|
|
|
|
3. If your target machine is on the same physical network and you configured it to use a custom
|
|
gateway, disable ICMP redirects:
|
|
|
|
>>> echo 0 | sudo tee /proc/sys/net/ipv4/conf/*/send_redirects
|
|
|
|
You may also want to consider enabling this permanently in ``/etc/sysctl.conf``
|
|
as demonstrated `here <https://unix.stackexchange.com/a/58081>`_.
|
|
|
|
4. Create an iptables ruleset that redirects the desired traffic to the
|
|
mitmproxy port. Details will differ according to your setup, but the
|
|
ruleset should look something like this:
|
|
|
|
.. code-block:: none
|
|
|
|
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080
|
|
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8080
|
|
|
|
5. Fire up mitmproxy. You probably want a command like this:
|
|
|
|
>>> mitmproxy -T --host
|
|
|
|
The ``-T`` flag turns on transparent mode, and the ``--host``
|
|
argument tells mitmproxy to use the value of the Host header for URL display.
|
|
|
|
6. Finally, configure your test device to use the host on which mitmproxy is
|
|
running as the default gateway.
|
|
|
|
|
|
For a detailed walkthrough, have a look at the :ref:`transparent-dhcp` tutorial.
|
|
|
|
Debain
|
|
======
|
|
|
|
To make the changes permanent on on Debian (inc ubuntu and raspbian)
|
|
systems:
|
|
|
|
1. Write the sysctl changes to a new config file at (for example) /etc/sysctl.d/mitm.conf
|
|
|
|
.. code-block:: none
|
|
|
|
net.ipv4.ip_forward = 1
|
|
net.ipv4.conf.all.accept_redirects = 0
|
|
net.ipv4.conf.all.send_redirects = 0
|
|
|
|
If your system doesn't have a directory /etc/sysctl.d you can instead add the rule to the end of /etc/sysctl.conf
|
|
|
|
2. To make iptables changes persistent, install the package iptables-persistent:
|
|
|
|
>>> sudo apt-get install iptables-persistent
|