simple tcp-level proxy