目标
将本机的7088端口转发至其他主机
主机IP:1.1.1.1
目标主机IP和端口:2.2.2.2:1521
方法
echo "1" > /proc/sys/net/ipv4/ip_forward
或
vi /etc/sysctl.conf
将 net.ipv4.ip_forward = 0 改成:
net.ipv4.ip_forward = 1
syscty -p
例1:
iptables -t nat -A PREROUTING -p tcp -m tcp --dport 7088 -j DNAT --to-destination 2.2.2.2:1521
iptables -t nat -A POSTROUTING -p tcp -m tcp --dport 1521 -j SNAT --to-source 1.1.1.1
或
iptables -t nat -A POSTROUTING -j MASQUERADE
service iptables save
service iptables restart
例2:
192.168.0.7 转发机
113.108.16.119 腾讯企业邮箱服务器IP
邮件客户端配置:
POP3服务器:192.168.0.7 端口:1010
SMTP服务器:192.168.0.7 端口:2525
iptables -t nat -A PREROUTING -d 192.168.0.7 -p tcp -m tcp --dport 1010 -j DNAT --to-destination 113.108.16.119:110
iptables -t nat -A PREROUTING -d 192.168.0.7 -p tcp -m tcp --dport 2525 -j DNAT --to-destination 113.108.16.119:25
iptables -t nat -A POSTROUTING -d 113.108.16.119 -p tcp -m tcp --dport 25 -j SNAT --to-source 192.168.0.7
iptables -t nat -A POSTROUTING -d 113.108.16.119 -p tcp -m tcp --dport 110 -j SNAT --to-source 192.168.0.7