I'm currently trying to get my setup to work.
[ victim ] --- [ mitm ] --- [ net ]
- net: 10.0.0.0/24
- victim: 10.0.0.1
- mitm: 10.0.0.2
- gateway: 10.0.0.254
ip l a name br0 type bridge ip l set br0 up ip l set eth0 up ip l set eth0 master br0 ip l set eth1 up ip l set eth1 master br0 ip a a 10.0.0.2/24 dev br0 ip r a default via 10.0.0.254 dev br0
The bridge works, I can access the net from the victim.
Now I'd like to reroute port 445 to my proxy on the bridge for the victim so the victim has to access my proxy for Group Policies.
How do I achieve that?
iptables -t nat -I PREROUTING -p tcp --dport 445 -j REDIRECT --to-ports 445
does not help, unfortunately. (This is the setup I can use if I can force the victim in a subnet I activate myself, using routing on the mitm laptop instead of bridging network interfaces. The routing scenario is currently impossible.)