Anyway to add linux REDIRECT support?

[elico]

Linux kernel has support for REDIRECT/INTERCEPT option with iptables.
Would it be possible to add support for connections interception?

[fangdingjun]

Do you mean support iptables -t nat -A OUTPUT -p tcp -J REDIRECT --to $sniproxy_listen_port, or something else ?

Support iptables -j REDIRECT is easy, but I can't image the usage scenarios.

Here is code to get the original destination after iptables redirect, maybe you can make some demo by yourself.

https://github.com/fangdingjun/obfssh/blob/tls/redir_iptables_2.go

[elico]

@fangdingjun I used this sketch:
elico@deaf87a

For content filtering..