I have a Linux Mint VM that I spun up as a transparent proxy for iOS devices. My intention is to tunnel all traffic from the iOS device through the VM and intercept it with Burp Suite, as an application I'm analyzing does not respect system proxy settings (the app is written in Xamarin).

Previous guides in making a transparent proxy required a PPTP VPN, which is no longer supported by iOS 10 and above. I tried making an OpenVPN server on the VM and the iptables rules are as follows (loosely based on the guide above):

iptables -t nat -A PREROUTING -i tun0 -p tcp --dport 80 -j REDIRECT --to-port 8080
iptables -t nat -A PREROUTING -i tun0 -p tcp --dport 443 -j REDIRECT --to-port 8080
iptables -t nat -A POSTROUTING -s -o enp0s3 -j MASQUERADE

Some context for the rules above: enp0s3 is my VM's bridged adapter, tun0 is the default OpenVPN interface.

The problem is that the VPN only works when the PREROUTING rules do not exist. If I add in the PREROUTING rules to iptables, the client can't connect to any webpage on the Internet (but is curiously able to connect to local web servers within the network).

Another solution I tried which did not work is:

iptables -t nat -A PREROUTING --source -p tcp -m tcp --dport 80 -j DNAT --to

Is there a way to forward/redirect traffic from OpenVPN (or indeed any other modern VPN such as L2TP over IPSec, Cisco IPSec) to Burp Suite for traffic analysis, or am I out of luck?

1 Answer 1


You need to enable the option 'Support invisible proxying' in Burp's options.

Burp options request handling

  • 1
    Well I'll be damned, that actually worked. I completely forgot about enabling invisible proxying. Thank you! For future reference for other people attempting to MITM themselves with OpenVPN and Burp Suite, simply execute the first set of iptables rules (taking into account your network interface for the 3rd line) and double check your invisible proxying setting.
    – Pan Ziyue
    Jul 29, 2018 at 13:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.