This is an old revision of the document!
iptables
Accept a Port/range
# iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
Forward a Port/range
Add the forwarding rule...
# iptables -t nat -I PREROUTING -i external -p tcp --dport 4662 -j DNAT --to 192.168.0.11:4662
Enable forwarding rule...
# iptables -I FORWARD -i eth0 -p tcp -d 192.168.0.11/32 --dport 4662 -j ACCEPT
Add forwarding rule for internal hosts...
# iptables -I FORWARD -i eth0 -p tcp -s 192.168.0.11/32 --dport 4662 -j ACCEPT