{"id":151,"date":"2017-10-21T06:53:00","date_gmt":"2017-10-21T06:53:00","guid":{"rendered":"https:\/\/linuxadmin.melberi.com\/uncategorized\/iptables-nat-how-to-port-forwarding"},"modified":"2017-10-31T07:03:19","modified_gmt":"2017-10-31T07:03:19","slug":"iptables-nat-port-forwarding","status":"publish","type":"post","link":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding","title":{"rendered":"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration"},"content":{"rendered":"<p>Linux iptables NAT, Port forwarding, Masquerade, Port Redirection Configuration for SendOS Fedora Redhat Suse Ubuntu<\/p>\n<p>If your have two network cards eth0, eth1<br \/>\nlets assume<br \/>\neth0 is connected to local network<br \/>\neth1 is connected to public network(or ppp0)<\/p>\n<h3><u><b>Masquerading<\/b><\/u><\/h3>\n<p><b>1)To enable nat on eth0 for all local network users<\/b><\/p>\n<p><b>If you are running iptables service,\u00a0 use the following method <\/b><\/p>\n<p><b>#echo 1 &gt; \/proc\/sys\/net\/ipv4\/ip_forward<br style=\"background-color: #cccccc;\" \/>#iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE <\/b><br \/>\nTo save this changes<br \/>\n<b>#iptables-save &gt; \/etc\/sysconfig\/iptables<\/b><br \/>\n<b>or <\/b><b>\u00a0<\/b><br \/>\n<b>#service iptables save <\/b><b> <\/b><br \/>\n<b>#service iptables restart <\/b><\/p>\n<p>This will enable Masquerade. Now you can configure eth0 as the gateway for local network.<\/p>\n<p><b>If you are not running iptables service<\/b><br \/>\nedit \/etc\/rc.local and add the below lines<\/p>\n<p><b>echo 1 &gt; \/proc\/sys\/net\/ipv4\/ip_forward<br style=\"background-color: #cccccc;\" \/>iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE <\/b><\/p>\n<p>Then\u00a0 execute the .\/rc.local file<\/p>\n<p><b>2) To enable nat on eth0 for specified network user ips<\/b><\/p>\n<p><b>#echo 1 &gt; \/proc\/sys\/net\/ipv4\/ip_forward<br style=\"background-color: #cccccc;\" \/>#iptables -t nat -A POSTROUTING -s x.x.x.x(ip of local user system1) -o eth1 -j MASQUERADE<br style=\"background-color: #cccccc;\" \/>#iptables -t nat -A POSTROUTING -s x.x.x.x(ip of local user system2) -o eth1 -j MASQUERADE <br style=\"background-color: #cccccc;\" \/>#iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE\u00a0 <\/b><\/p>\n<h3><u><b>Port Redirection<\/b><\/u><\/h3>\n<p><b>1)To redirect external 80 port traffic to 3128 port<\/b><\/p>\n<p><b style=\"background-color: #cccccc;\">#iptables -t nat -A PREROUTING -i eth1 -p tcp &#8211;dport 80 -j REDIRECT &#8211;to-port 3128 <\/b><\/p>\n<p><b>2)To redirect external rdp port traffic to any local systems rdp port. <\/b><\/p>\n<p><b>#iptables -t nat -A PREROUTING -t nat -p tcp -d x.x.x.x(eth1 ip) &#8211;dport 3389 -j DNAT &#8211;to x.x.x.x(ip of any local network system):3389 <br style=\"background-color: #cccccc;\" \/>\u00a0or<br style=\"background-color: #cccccc;\" \/>#iptables -t nat -A PREROUTING -t nat -p tcp -d x.x.x.x(eth1 ip) &#8211;dport 3382 -j DNAT &#8211;to x.x.x.x(ip of any local network system):3389<\/b><\/p>\n<p>Based on your requirement, you can change the port and ip<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Linux iptables NAT, Port forwarding, Masquerade, Port Redirection Configuration for SendOS Fedora Redhat Suse Ubuntu If your have two network cards eth0, eth1 lets assume eth0 is connected to local&#8230; <a href=\"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding\">Read more &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[104,140],"tags":[],"class_list":["post-151","post","type-post","status-publish","format-standard","hentry","category-iptables","category-nat"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Linux iptables NAT, Port forwarding, Masquerade, Port Redirection Configuration for SendOS Fedora Redhat Suse Ubuntu If your have two network cards eth0, eth1 lets assume eth0 is connected to local network eth1 is connected to public network(or ppp0) Masquerading 1)To enable nat on eth0 for all local network users If you are running iptables service,\" \/>\n\t<meta name=\"robots\" content=\"max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n\t<meta name=\"author\" content=\"admin\"\/>\n\t<meta name=\"msvalidate.01\" content=\"F5B964E0B63F681BBDE95AB72193D75E\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding#article\",\"name\":\"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration - Linux How To\",\"headline\":\"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration\",\"author\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/author\\\/admin#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/06\\\/MelB.png\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/#articleImage\",\"width\":320,\"height\":320},\"datePublished\":\"2017-10-21T06:53:00+00:00\",\"dateModified\":\"2017-10-31T07:03:19+00:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding#webpage\"},\"articleSection\":\"IPTABLES, NAT\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/category\\\/iptables#listItem\",\"name\":\"IPTABLES\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/category\\\/iptables#listItem\",\"position\":2,\"name\":\"IPTABLES\",\"item\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/category\\\/iptables\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding#listItem\",\"name\":\"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding#listItem\",\"position\":3,\"name\":\"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/category\\\/iptables#listItem\",\"name\":\"IPTABLES\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/#organization\",\"name\":\"Linux How To\",\"url\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/06\\\/MelB.png\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding\\\/#organizationLogo\",\"width\":320,\"height\":320},\"image\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/author\\\/admin#author\",\"url\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/author\\\/admin\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1ee7acbcab1a0ae6b35481c34cd31ee5c4d15292f5a1e069321cd34f1ceccd11?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"admin\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding#webpage\",\"url\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding\",\"name\":\"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration - Linux How To\",\"description\":\"Linux iptables NAT, Port forwarding, Masquerade, Port Redirection Configuration for SendOS Fedora Redhat Suse Ubuntu If your have two network cards eth0, eth1 lets assume eth0 is connected to local network eth1 is connected to public network(or ppp0) Masquerading 1)To enable nat on eth0 for all local network users If you are running iptables service,\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/iptables\\\/iptables-nat-port-forwarding#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/author\\\/admin#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/author\\\/admin#author\"},\"datePublished\":\"2017-10-21T06:53:00+00:00\",\"dateModified\":\"2017-10-31T07:03:19+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/#website\",\"url\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/\",\"name\":\"Linux How To\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.melberi.com\\\/linuxadmin\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration - Linux How To","description":"Linux iptables NAT, Port forwarding, Masquerade, Port Redirection Configuration for SendOS Fedora Redhat Suse Ubuntu If your have two network cards eth0, eth1 lets assume eth0 is connected to local network eth1 is connected to public network(or ppp0) Masquerading 1)To enable nat on eth0 for all local network users If you are running iptables service,","canonical_url":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding","robots":"max-snippet:-1, max-image-preview:large, max-video-preview:-1","keywords":"","webmasterTools":{"msvalidate.01":"F5B964E0B63F681BBDE95AB72193D75E","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding#article","name":"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration - Linux How To","headline":"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration","author":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/author\/admin#author"},"publisher":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.melberi.com\/linuxadmin\/wp-content\/uploads\/sites\/3\/2021\/06\/MelB.png","@id":"https:\/\/www.melberi.com\/linuxadmin\/#articleImage","width":320,"height":320},"datePublished":"2017-10-21T06:53:00+00:00","dateModified":"2017-10-31T07:03:19+00:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding#webpage"},"isPartOf":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding#webpage"},"articleSection":"IPTABLES, NAT"},{"@type":"BreadcrumbList","@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.melberi.com\/linuxadmin\/#listItem","position":1,"name":"Home","item":"https:\/\/www.melberi.com\/linuxadmin\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.melberi.com\/linuxadmin\/category\/iptables#listItem","name":"IPTABLES"}},{"@type":"ListItem","@id":"https:\/\/www.melberi.com\/linuxadmin\/category\/iptables#listItem","position":2,"name":"IPTABLES","item":"https:\/\/www.melberi.com\/linuxadmin\/category\/iptables","nextItem":{"@type":"ListItem","@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding#listItem","name":"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.melberi.com\/linuxadmin\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding#listItem","position":3,"name":"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration","previousItem":{"@type":"ListItem","@id":"https:\/\/www.melberi.com\/linuxadmin\/category\/iptables#listItem","name":"IPTABLES"}}]},{"@type":"Organization","@id":"https:\/\/www.melberi.com\/linuxadmin\/#organization","name":"Linux How To","url":"https:\/\/www.melberi.com\/linuxadmin\/","logo":{"@type":"ImageObject","url":"https:\/\/www.melberi.com\/linuxadmin\/wp-content\/uploads\/sites\/3\/2021\/06\/MelB.png","@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding\/#organizationLogo","width":320,"height":320},"image":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/www.melberi.com\/linuxadmin\/author\/admin#author","url":"https:\/\/www.melberi.com\/linuxadmin\/author\/admin","name":"admin","image":{"@type":"ImageObject","@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/1ee7acbcab1a0ae6b35481c34cd31ee5c4d15292f5a1e069321cd34f1ceccd11?s=96&d=mm&r=g","width":96,"height":96,"caption":"admin"}},{"@type":"WebPage","@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding#webpage","url":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding","name":"Linux iptables NAT Port forwarding Masquerade Port Redirection Configuration - Linux How To","description":"Linux iptables NAT, Port forwarding, Masquerade, Port Redirection Configuration for SendOS Fedora Redhat Suse Ubuntu If your have two network cards eth0, eth1 lets assume eth0 is connected to local network eth1 is connected to public network(or ppp0) Masquerading 1)To enable nat on eth0 for all local network users If you are running iptables service,","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/#website"},"breadcrumb":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-nat-port-forwarding#breadcrumblist"},"author":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/author\/admin#author"},"creator":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/author\/admin#author"},"datePublished":"2017-10-21T06:53:00+00:00","dateModified":"2017-10-31T07:03:19+00:00"},{"@type":"WebSite","@id":"https:\/\/www.melberi.com\/linuxadmin\/#website","url":"https:\/\/www.melberi.com\/linuxadmin\/","name":"Linux How To","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.melberi.com\/linuxadmin\/#organization"}}]}},"aioseo_meta_data":{"post_id":"151","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"limit_modified_date":false,"created":"2021-03-11 16:43:40","updated":"2026-10-21 20:48:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null,"ai":null,"breadcrumb_settings":null,"seo_analyzer_scan_date":null},"_links":{"self":[{"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/posts\/151","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/comments?post=151"}],"version-history":[{"count":3,"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/posts\/151\/revisions"}],"predecessor-version":[{"id":779,"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/posts\/151\/revisions\/779"}],"wp:attachment":[{"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/media?parent=151"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/categories?post=151"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.melberi.com\/linuxadmin\/wp-json\/wp\/v2\/tags?post=151"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}