diff --git a/Shorewall/manpages/shorewall-tcrules.xml b/Shorewall/manpages/shorewall-tcrules.xml
index 118634c5e..2954951e6 100644
--- a/Shorewall/manpages/shorewall-tcrules.xml
+++ b/Shorewall/manpages/shorewall-tcrules.xml
@@ -407,39 +407,6 @@ SAME $FW 0.0.0.0/0 tcp 80,443
classes will have a value > 256.
-
- TPROXY(mark[/mask][,[port][,[address]]])
-
- Transparently redirects a packet without altering the IP
- header. Requires a local provider to be defined in shorewall-providers(5).
-
- There are three parameters to TPROXY - only the first
- (mark) is required:
-
-
-
- mark - the MARK value
- corresponding to the local provider in shorewall-providers(5).
-
-
-
- port - the port on which
- the proxy server is listening. If omitted, the original
- destination port.
-
-
-
- address - a local (to the
- firewall) IP address on which the proxy server is listening.
- If omitted, the IP address of the interface on which the
- request arrives.
-
-
-
-
TTL([-|
simply include COMMENT on a line by itself.
-
- TPROXY(mark[/mask][,[port][,[address]]])
-
- Transparently redirects a packet without altering the IP
- header. Requires a local provider to be defined in shorewall6-providers(5).
-
- There are three parameters to TPROXY - only the first
- (mark) is required:
-
-
-
- mark - the MARK value
- corresponding to the local provider in shorewall6-providers(5).
-
-
-
- port - the port on which
- the proxy server is listening. If omitted, the original
- destination port.
-
-
-
- address - a local (to the
- firewall) IP address on which the proxy server is listening.
- If omitted, the IP address of the interface on which the
- request arrives.
-
-
-
-
HL([-|
-
-
- Transparent with TPROXY
-
- Shorewall 4.4.7 contains support for TPROXY. TPROXY differs from
- REDIRECT in that it does not modify the IP header. Because the IP header
- stays intact, TPROXY requires policy routing to direct the packets to the
- proxy server running on the firewall. This approach requires TPROXY
- support in your kernel and iptables and Squid 3. See http://wiki.squid-cache.org/Features/Tproxy4.
-
- The following configuration works with Squid running on the firewall
- itself (assume that Squid is listening on port 3128).
-
- /etc/shorewall/interfaces:
-
- #ZONE INTERFACE BROADCAST OPTIONS
-- lo - -
-
- /etc/shorewall/providers:
-
- #NAME NUMBER MARK DUPLICATE INTERFACE GATEWAY OPTIONS COPY
-Tproxy 1 1 - lo - local
-
- /etc/shorewall/tcrules (assume loc interface is
- eth1):
-
- MARK SOURCE DEST PROTO PORT(S)
-TPROXY(1,3128) eth1 0.0.0.0/0 tcp 80
-
- /etc/shorewall/rules:
-
- #ACTION SOURCE DEST PROTO DEST PORT(S)
-ACCEPT loc $FW tcp 80
-ACCEPT $FW net tcp 80
-