Skip to content

Instantly share code, notes, and snippets.

@goncha

goncha/gist:3741416

Last active September 7, 2017 09:40
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save goncha/3741416 to your computer and use it in GitHub Desktop.
Save goncha/3741416 to your computer and use it in GitHub Desktop.
Download ZIP
iptables nat & port forwarding
Raw
gistfile1.sh
## set net.ipv4.ip_forward = 1 in /etc/sysctl.conf
## NAT:
iptables -t nat -A POSTROUTING -s 1.1.9.251/32 -o ${INET_DEV} -j SNAT --to-source ${INET_IP}
## PORT FORWARDING:
iptables -t nat -A PREROUTING -i ${INET_DEV} -p tcp -m tcp --dport ${INET_PORT} -j DNAT --to-destination ${LOCAL_IP}:${LOCAL_PORT}
@sanketadmin
Copy link

sanketadmin commented Sep 7, 2017 •
edited

with rules specified above i am able to forward traffic coming on one server to other but i am not able to get original client IP as we are doing SNAT in postrouting chain.
I want to forward traffic on 192.168.0.192 to 172.16.1.28 but i want original client IP who sent packet on 192.168.0.192
How i can do that

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment