# Tunneler intercept-only mode? **URL:** \ **Category:** Tunneler Apps\ **Created:** [February 27, 2026, 4:53am UTC](https://openziti.discourse.group/t/tunneler-intercept-only-mode/5659 "2026-02-27T04:53:19Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![shawncp](https://avatars.discourse-cdn.com/v4/letter/s/4af34b/32.png) [@shawncp](https://openziti.discourse.group/u/shawncp)\ **Post date:** [February 27, 2026, 4:53am UTC](https://openziti.discourse.group/t/tunneler-intercept-only-mode/5659/1 "2026-02-27T04:53:19Z")
Hi All, I see that the tunneler clients can run in run-host mode that only allows host configurations (or at least does not allow intercept functionality), and can run in run mode that allow both host and intercept configurations. Q: Is there a way to configure the tunneler to only accept intercept configurations? Motivation: I would like to allow extended family access to some resources on my network while assuring them that the tunneler client does not allow me access to their phone/pc/etc. I have verified that the Android (Ziti Mobile Edge) and Linux (ziti-edge-tunnel) tunneler clients both allow me to do just that. Unhappily in addition and from a transparency perspective, the ZME Android client shows the host configuration as an intercept when it is in fact a host config. Thank you! ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [February 27, 2026, 10:54am UTC](https://openziti.discourse.group/t/tunneler-intercept-only-mode/5659/2 "2026-02-27T10:54:03Z")
Hi @shawncp, it's a long-standing idea/request that we just haven't been able to find the time to implement. > > > It would be useful as a user to control if my tunneler could only host services …or if my tunneler could only intercecpt services or let me decide to do either. > > the option should be dynamically updatable without requiring restarting the tunneling app It's come up now and then in the years since that's issue was opened but it's something we continue to bring up every few months or so. I'm sure we will get to it, but like all our other good ideas, it's just a properly/prioritization problem. Cheers ---
**Author:** ![shawncp](https://avatars.discourse-cdn.com/v4/letter/s/4af34b/32.png) [@shawncp](https://openziti.discourse.group/u/shawncp)\ **Post date:** [February 28, 2026, 1:42am UTC](https://openziti.discourse.group/t/tunneler-intercept-only-mode/5659/3 "2026-02-28T01:42:05Z")
Thank you @TheLumberjack for the reference. I have added a bump to the github issue.