iptables 端口转发

oyqiaojin

server  A  192.168.1.36   win7
server  B  192.168.1.200   centos6
server  C  192.168.1.100   客户端

3台机器同一局域网

让serverC用远程桌面客户端通过serverB的3389端口访问serverA。serverB上的规则如下：

[root@localhost ~]# vim /etc/sysconfig/iptables
# Generated by iptables-save v1.4.7 on Wed Apr 10 21:09:48 2013
*nat
REROUTING ACCEPT [7:890]
OSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A PREROUTING -d 192.168.1.200/32 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 192.168.1.36:3389
#-A POSTROUTING -d 192.168.1.36/32 -p tcp -m tcp --dport 3389 -j MASQUERADE
-A POSTROUTING -j MASQUERADE
-A POSTROUTING -d 192.168.1.36/32 -p tcp -m tcp --dport 3389 -j SNAT --to-source 192.168.1.200
COMMIT
# Completed on Wed Apr 10 21:09:48 2013
# Generated by iptables-save v1.4.7 on Wed Apr 10 21:09:48 2013
*filter
:INPUT ACCEPT [2546:279763]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [969:72212]
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
COMMIT

ip_forward 已经为1了

为什么访问不了？

oyqiaojin

算了，我自己回答：
  echo 1 > /proc/sys/net/ipv4/ip_forward  重启恢复到0了