iptables

[h4x]

i want to do something, so if i recive a connection request i will forward it to other host (with ip and port changed to local machine) and do that will all traffic.
the tunnel, or more like proxy.


i conenct to A, A conenct to B, B send to A, A send to me.
i want to do it with changing port and ip, and like to know how to do it transparently (ip/port stay same).

iptables are my goal, not custom ****-app. or c code.



thx

[Red_Shadow]

Read this: Iptables Tutorial 1.2.2

[onus]

Linux Packet Filtering and iptables - DNAT target
Port forwarding for iptables (DMZ)
in this case I am forwarding port 22 to an internal machine 192.168.1.50

iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 22 -j DNAT --to 192.168.1.50:22
iptables -A INPUT -p tcp -m state --state NEW --dport 22 -i eth1 -j ACCEPT

You will have to write one more rule in your FORWARDING table as well.

[onus]

Like this

iptables -A FORWARD -i eth0 -d 192.168.0.50 -p tcp --dport 22 -j ACCEPT