Difference between revisions of "IPtable Forward Port"
From MS Computech
(New page: ===== This is sample rule to forward rdp to host. [[ LinixGateway-->>Windows Server2003 ]] ===== #### #Forward rule Listen port 3000 forward to 3389 <pre>echo 1 &...) |
|||
| Line 1: | Line 1: | ||
| − | ===== This is sample rule to forward rdp to host. | + | ===== This is sample rule to forward rdp to host. LinixGateway-->>Windows Server2003 ===== |
| − | |||
| − | |||
#Forward rule Listen port 3000 forward to 3389 | #Forward rule Listen port 3000 forward to 3389 | ||
<pre>echo 1 > /proc/sys/net/ipv4/ip_forward | <pre>echo 1 > /proc/sys/net/ipv4/ip_forward | ||
| − | |||
| − | |||
| + | Forward to 2003 RDP And Nat | ||
| + | <pre>/sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 3000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<br>/sbin/iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 3000 -j DNAT --to-destination 172.31.255.2:3389</pre></pre> | ||
<br> | <br> | ||
| − | + | WWW Fileshare<br><pre>/sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 8000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<br>/sbin/iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 8000 -j DNAT --to-destination 172.31.255.2:8000</pre> | |
<br> | <br> | ||
<pre>/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<br></pre> | <pre>/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<br></pre> | ||
Revision as of 17:03, 1 December 2008
This is sample rule to forward rdp to host. LinixGateway-->>Windows Server2003
- Forward rule Listen port 3000 forward to 3389
echo 1 > /proc/sys/net/ipv4/ip_forward Forward to 2003 RDP And Nat <pre>/sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 3000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<br>/sbin/iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 3000 -j DNAT --to-destination 172.31.255.2:3389</pre>
/sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 8000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<br>/sbin/iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 8000 -j DNAT --to-destination 172.31.255.2:8000
/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<br>
