{"id":1064,"date":"2010-12-03T13:53:20","date_gmt":"2010-12-03T13:53:20","guid":{"rendered":"http:\/\/wiki.freeiz.com\/?p=1064"},"modified":"2016-08-09T12:05:06","modified_gmt":"2016-08-09T12:05:06","slug":"linux-transit-vm-port-forward","status":"publish","type":"post","link":"https:\/\/wiki-see.info\/wp\/2010\/12\/03\/linux-transit-vm-port-forward\/","title":{"rendered":"Linux Transit VM Port Forward"},"content":{"rendered":"

Need forwarding to Telford Internal IP Address – 10.10.1.1
\nFixed Internet IP Address – 1.1.1.1<\/p>\n

Ports 40000, 41000, 42000, 43000, 44000, 45000, & 46000 need forwarding to 10.10.1.1<\/p>\n

Configuration to be Done.<\/p>\n

Need to create a Ethernet Subinterface on the VM<\/strong> :<\/p>\n

# Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]
\nDEVICE=eth1:3
\nBOOTPROTO=static
\nONBOOT=yes
\nHWADDR=00:0c:29:fa:da:13
\nIPADDR=1.1.1.1
\nNETMASK=255.255.255.0
\nNETWORK=1.1.1.254
\nBROADCAST=1.1.1.253
\nBring Interface UP<\/strong> :<\/p>\n

sudo ifup eth1:3<\/p>\n

To View a list of rules with the NAT table<\/strong> :<\/p>\n

sudo iptables -vnL -t nat –line-numbers<\/p>\n

Need to complete PREROUTING chain in order to DNAT these ports from WAN\u00a0to destination LAN address<\/strong> :<\/p>\n

sudo iptables -t nat -I PREROUTING\u00a01 -d\u00a01.1.1.1 -p tcp –dport 40000 -j DNAT –to 10.10.1.1
\nsudo iptables -t nat -I PREROUTING 2 -d\u00a01.1.1.1 -p tcp –dport 41000 -j DNAT –to 10.10.1.1
\nsudo iptables -t nat -I PREROUTING\u00a03 -d\u00a01.1.1.1 -p tcp –dport 42000 -j DNAT –to 10.10.1.1
\nsudo iptables -t nat -I PREROUTING\u00a04 -d\u00a01.1.1.1 -p tcp –dport 43000 -j DNAT –to 10.10.1.1
\nsudo iptables -t nat -I PREROUTING\u00a05 -d\u00a01.1.1.1 -p tcp –dport 44000 -j DNAT –to 10.10.1.1
\nsudo iptables -t nat -I PREROUTING\u00a06 -d\u00a01.1.1.1 -p tcp –dport 45000 -j DNAT –to 10.10.1.1
\nsudo iptables -t nat -I PREROUTING\u00a07 -d\u00a01.1.1.1 -p tcp –dport 46000 -j DNAT –to 10.10.1.1<\/p>\n

To summarize this as one rule :<\/p>\n

sudo iptables -t nat -I PREROUTING 18 -d 85.234.86.115 -p tcp -m multiport –dport 40000,41000,42000,43000,44000,45000,46000 -j DNAT –to 10.10.1.1<\/p>\n

Need to complete POSTROUTING chain in order to SNAT these ports from LAN address to destination Subinterface :<\/strong> :<\/p>\n

sudo iptables -t nat -I POSTROUTING 20 -o eth1:3 -s 10.10.1.1 -p tcp -m multiport –dports 40000,41000,42000,43000,44000,45000,46000 -j SNAT –to 1.1.1.1<\/p>\n

To Delete a Chain Rule<\/p>\n

sudo iptables -t nat -D POSTROUTING 20
\nsudo iptables -t nat -D PREROUTING 20<\/p>\n

Troubleshooting Diagnostics Testing<\/strong> :<\/p>\n

From the Internet :<\/p>\n

telnet 85.234.86.115 40000<\/p>\n

B00m.<\/p>\n","protected":false},"excerpt":{"rendered":"

Need forwarding to Telford Internal IP Address – 10.10.1.1 Fixed Internet IP Address – 1.1.1.1 Ports 40000, 41000, 42000, 43000, 44000, 45000, & 46000 need forwarding to 10.10.1.1 Configuration to be Done. Need to create a Ethernet Subinterface on the VM : # Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE] DEVICE=eth1:3 BOOTPROTO=static ONBOOT=yes HWADDR=00:0c:29:fa:da:13 IPADDR=1.1.1.1 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,8],"tags":[459,565,657,695],"class_list":["post-1064","post","type-post","status-publish","format-standard","hentry","category-iptables-linux","category-linux","tag-linux-transit","tag-prerouting","tag-subinterface","tag-transit-vm"],"_links":{"self":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/1064","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/comments?post=1064"}],"version-history":[{"count":1,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/1064\/revisions"}],"predecessor-version":[{"id":4834,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/1064\/revisions\/4834"}],"wp:attachment":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/media?parent=1064"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/categories?post=1064"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/tags?post=1064"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}