Error 24 on listener about sslsplit HOT 3 CLOSED

I see #23 now, but I'm still not sure how to setup iptables/netfilter to get this working.

from sslsplit.

Well, you need to tell your kernel not to interfer with connections originating from sslsplit locally, otherwise that creates an endless loop of connections. As outlined in #23, there are many ways to do that, depending on your setup. Try limiting the redirection rules to the network interface that the connections are coming in on, for an easy solution. In case you are trying to run sslsplit on the same system as the browser, on Linux Netfilter you can solve that by running sslsplit under a different account than the browser and then using the owner module to only apply the redirection rules to the user the browser runs as. If you have a working iptables config for running it locally, feel free to submit a patch to the manual page or post it here to share it, that might be useful for others.

Not a bug, closing the issue.

from sslsplit.

Looking at this issue years later, using owner module to differentiate the traffic makes sense. Maybe marking the sslsplit traffic could be another solution? Adding an option to set a fwmark on sslsplit traffic so the marked traffic won't be caught by the REDIRECT rule we put.

For anyone looking for an easy way out:
Run sslsplit as root.

iptables -t nat -A OUTPUT -d <attackedIP> -p tcp -m owner --gid-owner <yourUserName> --dport 443 -j REDIRECT --to-ports 8443

from sslsplit.