iptables nat 示例

*nat
:PREROUTING ACCEPT [54:3256]
:POSTROUTING ACCEPT [9:1757]
:OUTPUT ACCEPT [9:1757]
-A PREROUTING -p tcp -m tcp --dport 23316 -j DNAT --to-destination 192.168.2.4:3316
-A PREROUTING -p tcp -m tcp --dport 23315 -j DNAT --to-destination 192.168.2.4:3315
-A PREROUTING -p tcp -m tcp --dport 11808 -j DNAT --to-destination 192.168.2.4:11808
-A PREROUTING -p tcp -m tcp --dport 10051 -j DNAT --to-destination 192.168.2.4:10051
-A PREROUTING -p tcp -m tcp --dport 222 -j DNAT --to-destination 192.168.2.4:22
-A POSTROUTING -d 192.168.2.4/32 -p tcp -m tcp --dport 3316 -j SNAT --to-source 192.168.2.3
-A POSTROUTING -d 192.168.2.4/32 -p tcp -m tcp --dport 3315 -j SNAT --to-source 192.168.2.3
-A POSTROUTING -d 192.168.2.4/32 -p tcp -m tcp --dport 22 -j SNAT --to-source 192.168.2.3
-A POSTROUTING -d 192.168.2.4/32 -p tcp -m tcp --dport 11808 -j SNAT --to-source 192.168.2.3
-A POSTROUTING -d 192.168.2.4/32 -p tcp -m tcp --dport 10051 -j SNAT --to-source 192.168.2.3
COMMIT