{"id":233,"date":"2010-06-02T18:44:19","date_gmt":"2010-06-02T18:44:19","guid":{"rendered":"http:\/\/wiki.freeiz.com\/?p=233"},"modified":"2016-08-09T12:00:51","modified_gmt":"2016-08-09T12:00:51","slug":"iptables-prerouting-rule","status":"publish","type":"post","link":"https:\/\/wiki-see.info\/wp\/2010\/06\/02\/iptables-prerouting-rule\/","title":{"rendered":"Iptables PreRouting Rule"},"content":{"rendered":"

sudo iptables -t nat -vnL
\nsudo iptables -t nat -vnL\u00a0\u2013line-numbers
\n!<\/p>\n

Port Forward From A Static Public Ip. Port Translation from 4000 to 3389.<\/strong>
\niptables -t nat -I PREROUTING -s\u00a0public_ip<\/em> -d\u00a0internal_lan_int<\/em> -p tcp -m tcp –dport 4000 -j DNAT –to-destination 10.11.254.4:3389<\/p>\n

Port Forward From Any Public Ip<\/strong>.
\niptables -t nat -I PREROUTING -d\u00a0internal_lan_int<\/em> -p tcp -m tcp –dport 25 -j DNAT –to-destination 10.11.254.250:25<\/p>\n

Port Forward From\u00a0A Static Public Ip to Internal Lan Webserver.<\/strong>
\niptables -t nat -I PREROUTING -s\u00a0public_ip<\/em> -d\u00a0internal_lan_ip<\/em> -p tcp -m tcp –dport 80 -j ACCEPT<\/p>\n

Port Forward From A Static Public Ip. Port\u00a0Redirection from 80 to 8080.<\/strong>
\niptables -t nat -I PREROUTING -s\u00a0public_ip<\/em> -d\u00a0internal_lan_ip<\/em> -p tcp -m tcp –dport 80 -j REDIRECT –to-ports 8080
\nPort Forward From Any Public Ip<\/strong>. Port\u00a0Redirection from 80 to 8080.<\/strong>
\niptables -t nat -I PREROUTING -s\u00a0internal_lan_ip<\/em> -p tcp -m tcp –dport 80 -j REDIRECT –to-ports 8080<\/p>\n

Drop Port Forward Traffic from Public Ip<\/strong>.
\niptables -t nat -I PREROUTING -s\u00a0public_ip<\/em> -j DROP<\/p>\n

Adds a rule in PREROUTING to DNAT everything from 83.44.16.6 on tcp port 443 to 172.16.209.201
\n<\/strong>iptables -t nat -I PREROUTING -d 83.44.16.6 -p tcp \u2013dport 443 -j DNAT \u2013to 172.16.209.201<\/p>\n

To Delete a rule<\/strong> :
\nsudo iptables -t nat -D PREROUTING 14<\/p>\n

E.G :
\n
\nPrerouting<\/strong><\/a><\/p>\n

If you have a server on your internal network that you want make available externally,
\nyou can use the -j DNAT<\/code> target of the PREROUTING chain in NAT to specify a
\ndestination IP address and port where incoming packets requesting a connection to your
\ninternal service can be forwarded.<\/p>\n


\nuse the following command<\/strong>:
\nThis rule specifies that the nat table use the built-in PREROUTING chain to
\nforward incoming HTTP requests exclusively to the listed destination IP address of 172.31.0.23.<\/em><\/p>\n

For example, if you want to forward incoming HTTP requests to your dedicated
\nApache HTTP Server at 172.31.0.23,<\/p>\n

<\/p>\n

<\/div>\n
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to 172.31.0.23:80\n\n<\/span><\/strong><\/pre>\n
\n
If you have a default policy of DROP in your FORWARD chain<\/strong>, you must append a rule to
\nforward all incoming HTTP requests so that destination NAT routing is possible.<\/p>\n
To do this, use the following command<\/strong>:
\nThis rule forwards all incoming HTTP requests from the firewall to the intended destination;
\nthe Apache HTTP Server behind the firewall<\/em>.<\/p>\n
iptables -A FORWARD -i eth0 -p tcp --dport 80 -d 172.31.0.23 -j ACCEPT<\/pre>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
sudo iptables -t nat -vnL sudo iptables -t nat -vnL\u00a0\u2013line-numbers ! Port Forward From A Static Public Ip. Port Translation from 4000 to 3389. iptables -t nat -I PREROUTING -s\u00a0public_ip -d\u00a0internal_lan_int -p tcp -m tcp –dport 4000 -j DNAT –to-destination 10.11.254.4:3389 Port Forward From Any Public Ip. iptables -t nat -I PREROUTING -d\u00a0internal_lan_int -p tcp […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[404,565],"class_list":["post-233","post","type-post","status-publish","format-standard","hentry","category-iptables-linux","tag-iptables-prerouting","tag-prerouting"],"_links":{"self":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/comments?post=233"}],"version-history":[{"count":1,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/233\/revisions"}],"predecessor-version":[{"id":4667,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/233\/revisions\/4667"}],"wp:attachment":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/media?parent=233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/categories?post=233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/tags?post=233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}