{"id":2523,"date":"2016-04-28T10:34:00","date_gmt":"2016-04-28T02:34:00","guid":{"rendered":"http:\/\/dingxuan.info\/wp\/?p=2523"},"modified":"2016-04-28T10:34:36","modified_gmt":"2016-04-28T02:34:36","slug":"%e7%94%a8iptables%e5%81%9a%e7%ab%af%e5%8f%a3%e8%bd%ac%e5%8f%91","status":"publish","type":"post","link":"https:\/\/ybzx.vip\/wp\/?p=2523","title":{"rendered":"\u7528iptables\u505a\u7aef\u53e3\u8f6c\u53d1"},"content":{"rendered":"
\n

Forwarding Traffic with IPTables on CentOS 6<\/h1>\n
<\/div>\n<\/div>\n
\n

Introduction<\/h2>\n

Welcome! In this tutorial, I’ll explain how to forward TCP\/UDP traffic to a new server. This can especially be useful when you’re migrating your Vultr VPS to a new location. This tutorial covers both 32 and 64 bit versions of CentOS 6.<\/p>\n

Install IPTables<\/h2>\n

Before we can start, IPTables must be installed. Install IPTables with the following command.<\/p>\n

yum install iptables -y\r\n<\/code><\/pre>\n
Enable routing<\/h2>\n
Packet forwarding must be enabled on your server for this method to work. Open the file \/etc\/sysctl.conf<\/code>. Make sure the following line is enabled, and set to “1”:<\/p>\n
net.ipv4.ip_forward = 1\r\n<\/code><\/pre>\n
Save the file, then run:<\/p>\n
sysctl -p\r\n<\/code><\/pre>\n
Configure IPTables<\/h2>\n
Step One<\/h3>\n
Perform the commands below accordingly to your needs. Change “2.2.2.2” to your new server’s IP address and “venet0” to your Ethernet adapter. Also, change “80:90” to the desired port range that will be forwarded.<\/p>\n
iptables -A FORWARD -d 2.2.2.2 -i venet0 -p tcp -m tcp --dport 80:90 -j ACCEPT\r\n<\/code><\/pre>\n
If you want to forward a single port, simply replace the port range above with a single port. To forward UDP instead, replace instances of “tcp” above with “udp”.<\/p>\n
Step Two<\/h3>\n
Add routes for your newly added rules. Rules refer to the directives inside of IPTables. In this example, “1.1.1.1” represents your old server’s IP address and like before, “2.2.2.2” represents the destination\/new server’s IP. Again, update the port range and TCP\/UDP strings as needed.<\/p>\n
iptables -t nat -A PREROUTING -d 1.1.1.1 -p tcp -m tcp --dport 80:90 -j DNAT --to-destination 2.2.2.2\r\n<\/code><\/pre>\n
Step Three<\/h3>\n
Finalize the NAT forwarding. Change “venet0” to your Ethernet adapter.<\/p>\n
iptables -t nat -A POSTROUTING -o venet0 -j MASQUERADE\r\n<\/code><\/pre>\n
Step Four<\/h3>\n
Save our newly added rules and soft-restart IPTables.<\/p>\n
service iptables save\r\nservice iptables reload<\/code><\/pre>\n<\/div>\n
From: https:\/\/www.vultr.com\/docs\/forwarding-traffic-with-iptables-on-centos-6<\/p>\n
\u53e6\u5916\uff0c\u53ef\u53c2\u8003\uff1a
\nhttps:\/\/www.centos.org\/docs\/4\/html\/rhel-sg-en-4\/s1-firewall-ipt-fwd.html<\/p>\n","protected":false},"excerpt":{"rendered":"
Forwarding Traffic with IPTables on CentOS 6 Introducti … \u7ee7\u7eed\u9605\u8bfb\u7528iptables\u505a\u7aef\u53e3\u8f6c\u53d1<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117],"tags":[79,132],"class_list":["post-2523","post","type-post","status-publish","format-standard","hentry","category-network","tag-centos","tag-iptables"],"_links":{"self":[{"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/posts\/2523","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2523"}],"version-history":[{"count":0,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=\/wp\/v2\/posts\/2523\/revisions"}],"wp:attachment":[{"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2523"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2523"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ybzx.vip\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}