Difference between revisions of "IPtable Forward Port"
From MS Computech
| Line 2: | Line 2: | ||
#Forward rule Listen port 3000 forward to 3389 | #Forward rule Listen port 3000 forward to 3389 | ||
| − | <pre>echo 1 > /proc/sys/net/ipv4/ip_forward | + | <pre>echo 1 > /proc/sys/net/ipv4/ip_forward</pre> |
| − | Forward to 2003 RDP And Nat | + | Forward to 2003 RDP And Nat<br> |
| − | <pre> | + | <pre>sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 3000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<br>/sbin/iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 3000 -j DNAT --to-destination 172.31.255.2:3389</pre> |
<br> | <br> | ||
| − | + | WWW Fileshare<br> | |
| − | WWW Fileshare<br><pre>/sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 8000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<br>/sbin/iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 8000 -j DNAT --to-destination 172.31.255.2:8000</pre> | + | <pre>/sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 8000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<br>/sbin/iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 8000 -j DNAT --to-destination 172.31.255.2:8000</pre> |
| − | |||
<br> | <br> | ||
<pre>/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<br></pre> | <pre>/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<br></pre> | ||
Revision as of 17:04, 1 December 2008
This is sample rule to forward rdp to host. LinixGateway-->>Windows Server2003
- Forward rule Listen port 3000 forward to 3389
echo 1 > /proc/sys/net/ipv4/ip_forward
Forward to 2003 RDP And Nat
sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 3000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<br>/sbin/iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 3000 -j DNAT --to-destination 172.31.255.2:3389
WWW Fileshare
/sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 8000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<br>/sbin/iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 8000 -j DNAT --to-destination 172.31.255.2:8000
/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<br>
