iptables 端口映射总不成功

mantovine

echo 1 > /proc/sys/net/ipv4/ip_forward

# Generated by iptables-save v1.3.5 on Mon Nov  6 07:55:10 2006
*filter
:INPUT ACCEPT [52490:16378669]
:FORWARD ACCEPT [2310:1181639]
:OUTPUT ACCEPT [35404:22502965]
COMMIT
# Completed on Mon Nov  6 07:55:10 2006
# Generated by iptables-save v1.3.5 on Mon Nov  6 07:55:10 2006
*mangle
REROUTING ACCEPT [54801:17560348]
:INPUT ACCEPT [52490:16378669]
:FORWARD ACCEPT [2310:1181639]
:OUTPUT ACCEPT [35417:22504164]
OSTROUTING ACCEPT [38510:23778788]
COMMIT
# Completed on Mon Nov  6 07:55:10 2006
# Generated by iptables-save v1.3.5 on Mon Nov  6 07:55:10 2006
*nat
REROUTING ACCEPT [5596:603378]
OSTROUTING ACCEPT [1047:77228]
:OUTPUT ACCEPT [1106:95768]
-A PREROUTING -d 218.x.x.x-p tcp -m tcp --dport 5001 -j DNAT --to-destination 192.168.1.253
-A POSTROUTING -d 192.168.1.253 -p tcp --dport 5001 -j SNAT --to 218.x.x.x
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -j MASQUERADE
COMMIT
# Completed on Mon Nov  6 07:55:10 2006

看了好多贴子不知道怎么搞的还是不成功

我是想让外面的人可以用5001端口上我们的信使

河里的鱼

第一个在网关机上telnet 192.168.1.253 5001

第二个-A POSTROUTING -d 192.168.1.253 -p tcp --dport 5001 -j SNAT --to 218.x.x.x没有生效吧

第三个-A POSTROUTING -s 192.168.1.0/255.255.255.0 -j MASQUERADE 这是做的什么没有看懂,你能解释一下吗?

feixiang2966

貌似是ip伪装

feixiang2966

第二句，iptables -t nat -A POSTROUTING -s 192.168.1.253 -p tcp -sport 5001 -j SNAT --to 218.x.x.x
这样是把192.168.1.253转换成218。x.x.x
而且你三句话都不指定-t它默认是对 filter表进行操作