iptables常用配置

端口映射配置

# Generated by iptables-save v1.4.21 on Sat May  8 08:46:36 2021
*nat
:PREROUTING ACCEPT [141:13746]
:INPUT ACCEPT [82:5267]
:OUTPUT ACCEPT [1:73]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60001 -j DNAT --to-destination 192.168.168.1:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60002 -j DNAT --to-destination 192.168.168.2:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60003 -j DNAT --to-destination 192.168.168.3:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60004 -j DNAT --to-destination 192.168.168.4:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60005 -j DNAT --to-destination 192.168.168.5:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60006 -j DNAT --to-destination 192.168.168.6:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60007 -j DNAT --to-destination 192.168.168.7:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60008 -j DNAT --to-destination 192.168.168.8:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60009 -j DNAT --to-destination 192.168.168.9:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60010 -j DNAT --to-destination 192.168.168.10:8291
-A PREROUTING -d 144.48.67.86/32 -p tcp -m tcp --dport 60011 -j DNAT --to-destination 192.168.168.11:8291
-A POSTROUTING -j MASQUERADE
COMMIT
# Completed on Sat May  8 08:46:36 2021
# Generated by iptables-save v1.4.21 on Sat May  8 08:46:36 2021
*filter
:INPUT ACCEPT [3355:243425]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2135:881769]
-A FORWARD -j ACCEPT
COMMIT
# Completed on Sat May  8 08:46:36 2021