[求助]请问rh9下如何用iptables实现这一小功能[内详]

tanaous

用iptables实现映射多个端口到某个端口~
比如,真实提供服务的端口是tcp得6900
想要访问该机9090 8080端口时候相当于访问6900 请问如何用iptables实现。

查阅了不少资料后发现不是无效就是重启iptables时候报错.
现在的/etc/sysconfig/iptables内容为

1. 
   
2. *filter
   
3. :INPUT ACCEPT [0:0]
   
4. :FORWARD ACCEPT [0:0]
   
5. :OUTPUT ACCEPT [0:0]
   
6. :RH-Firewall-1-INPUT - [0:0]
   
7. -A INPUT -j RH-Firewall-1-INPUT
   
8. -A FORWARD -j RH-Firewall-1-INPUT
   
9. -A RH-Firewall-1-INPUT -i lo -j ACCEPT
   
10. -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
    
11. -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    
12. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
    
13. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
    
14. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6900 -j ACCEPT
    
15. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6900 -j ACCEPT
    
16. #-A RH-Firewall-1-INPUT -p tcp -j REJECT --reject-with tcp-reset
    
17. -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
    
18. COMMIT
    

复制代码

谢谢各位了！

platinum

应该做在 nat 表里，而不是 filter 表

tanaous

谢谢斑竹~
我试过了放在nat表里面~可是报错~

1. 
   
2. *nat
   
3. :PREROUTING ACCEPT [0:0]
   
4. :POSTROUTING ACCEPT [0:0]
   
5. :OUTPUT ACCEPT [0:0]
   
6. -A PREROUTING -i eth0 -p tcp --dport 9090 -j DNAT --to 127.0.0.1:6900  
   
7. COMMIT
   
8. *filter
   
9. :INPUT ACCEPT [0:0]
   
10. :FORWARD ACCEPT [0:0]
    
11. :OUTPUT ACCEPT [0:0]
    
12. :RH-Firewall-1-INPUT - [0:0]
    
13. -A INPUT -j RH-Firewall-1-INPUT
    
14. -A FORWARD -j RH-Firewall-1-INPUT
    
15. -A RH-Firewall-1-INPUT -i lo -j ACCEPT
    
16. -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
    
17. -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    
18. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
    
19. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
    
20. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 6900 -j ACCEPT
    
21. -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 9090 -j ACCEPT
    
22. #-A RH-Firewall-1-INPUT -p tcp -j REJECT --reject-with tcp-reset
    
23. -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
    
24. COMMIT
    

复制代码

提示第一个CoMMIT那行有错~

abc3w

net:

-A PREROUTING -i eth0 -p tcp -m tcp --dport 9090 -j DNAT --to-destination 127.0.0.1:6900
-A PREROUTING -i eth0 -p tcp -m tcp --dport 8080 -j DNAT --to-destination 127.0.0.1:6900

[ 本帖最后由 abc3w 于 2006-4-17 20:04 编辑 ]

platinum

原帖由 tanaous 于 2006-4-16 22:49 发表
谢谢斑竹~
我试过了放在nat表里面~可是报错~

[code]
*nat
REROUTING ACCEPT [0:0]
OSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A PREROUTING -i eth0 -p tcp --dport 9090 -j DNAT --to 127 ...

报错？报什么错？你做了什么报错？