iptables网关3389端口转发不成功

yaohyong2008

-A PREROUTING -d 202.96.209.110 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 192.168.2.5:3389
-A POSTROUTING -s 192.168.2.0/24 -j SNAT --to-source 202.96.209.110

外网不能防问





113.77.81.22.nsjtp-ctrl > 202.96.209.110.ms-wbt-server: Flags [S], cksum 0xbc86 (correct), seq 1763564969, win 14600, options [mss 1440,sackOK,TS val 1030242 ecr 0,nop,wscale 7], length 0
19:09:36.161349 IP (tos 0x0, ttl 59, id 26060, offset 0, flags [DF], proto TCP (6), length 60)
    113.77.81.22.nsjtp-ctrl > 202.96.209.110.ms-wbt-server: Flags [S], cksum 0xbb8c (correct), seq 1763564969, win 14600, options [mss 1440,sackOK,TS val 1030492 ecr 0,nop,wscale 7], length 0
19:09:38.166428 IP (tos 0x0, ttl 59, id 26061, offset 0, flags [DF], proto TCP (6), length 60)
    113.77.81.22.nsjtp-ctrl > 202.96.209.110.ms-wbt-server: Flags [S], cksum 0xb997 (correct), seq 1763564969, win 14600, options [mss 1440,sackOK,TS val 1030993 ecr 0,nop,wscale 7], length 0
19:09:42.177297 IP (tos 0x0, ttl 59, id 26062, offset 0, flags [DF], proto TCP (6), length 60)
    113.77.81.22.nsjtp-ctrl > 202.96.209.110.ms-wbt-server: Flags [S], cksum 0xb5ac (correct), seq 1763564969, win 14600, options [mss 1440,sackOK,TS val 1031996 ecr 0,nop,wscale 7], length 0
19:09:50.193372 IP (tos 0x0, ttl 59, id 26063, offset 0, flags [DF], proto TCP (6), length 60)
    113.77.81.22.nsjtp-ctrl > 202.96.209.110.ms-wbt-server: Flags [S], cksum 0xadd8 (correct), seq 1763564969, win 14600, options [mss 1440,sackOK,TS val 1034000 ecr 0,nop,wscale 7], length 0
19:10:06.225290 IP (tos 0x0, ttl 59, id 26064, offset 0, flags [DF], proto TCP (6), length 60)
    113.77.81.22.firefox > 202.96.209.110.ms-wbt-server: Flags [S], cksum 0x9e2e (correct), seq 1763564969, win 14600, options [mss 1440,sackOK,TS val 1038008 ecr 0,nop,wscale 7], length 0
19:10:38.258321 IP (tos 0x0, ttl 59, id 26065, offset 0, flags [DF], proto TCP (6), length 60)
    113.77.81.22.ng-umds > 202.96.209.110.ms-wbt-server: Flags [S], cksum 0x7ee5 (correct), seq 1763564969, win 14600, options [mss 1440,sackOK,TS val 1046016 ecr 0,nop,wscale 7], length 0
19:14:00.941022 IP (tos 0x0, ttl 109, id 256, offset 0, flags [none], proto TCP (6), length 40)
    113.6.232.122.x11 > 202.96.209.110.ms-wbt-server: Flags [S], cksum 0x5baa (correct), seq 418709504, win 16384, length 0

cryboy2001

iptables -A FORWARD -o eth0 -d 202.96.209.110 -p tcp --dport 3389 -j ACCEPT
iptables -A FORWARD -i eth0 -s 202.96.209.110 -p tcp --dport 3389 -j ACCEPT


加一下看看

yaohyong2008

回复 2# cryboy2001


    谢谢。{:2_172:}