cBrandon Community

General Category => Linux Fixes => Topic started by: branx86 on May 04, 2025, 08:28:21 PM

Title: iptables port forward to another server on the network
Post by: branx86 on May 04, 2025, 08:28:21 PM
    # DNAT (rewrite destination IP and port) - PREROUTING chain
    sudo iptables -t nat -A PREROUTING -p tcp --dport 22 -j DNAT --to-destination <dest_server_ip>:<dest_port>

    # SNAT (rewrite source IP) - POSTROUTING chain
    sudo iptables -t nat -A POSTROUTING -d <dest_server_ip> -p tcp --dport <dest_port> -j MASQUERADE

<dest_server_ip> = The server you want to get too.
<dest_port> = The server port you want to get too.

***You need both DNAT and SNAT for the port forwarding to work and make sure First, verify that IP forwarding is enabled. You can check this by running the command sysctl net.ipv4.ip_forward.
nano /etc/sysctl.conf  to change
If it's not set to 1, enable it temporarily by running sysctl -w net.ipv4.ip_forward=1.
Use cmd -   sysctl -p    to check if port forwarding is on

 iptables-save > /etc/sysconfig/iptables  = Once you have everything the way you want it.