iptables

Accept a Port/range

# iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT

Forward a Port/range

  • Add the forwarding rule
# iptables -t nat -I PREROUTING -i ethExternal -p tcp --dport 4662 -j DNAT --to 192.168.0.11:4662
  • Enable forwarding rule
# iptables -I FORWARD -i ethExternal -p tcp -d 192.168.0.11/32 --dport 4662 -j ACCEPT
  • Add forwarding rule for internal hosts
# iptables -I FORWARD -i ethExternal -p tcp -s 192.168.0.11/32 --dport 4662 -j ACCEPT
networking/linux/iptables.txt · Last modified: 19 years ago - 2007/05/28 06:45