端口转发

• iptables 端口转发

iptables -t nat -A PREROUTING -p tcp -m tcp –dport 8089 -j DNAT –to-destination 192.168.100.248:8089
iptables -t nat -vnL PREROUTING –line-number | grep “8089”
iptables -t nat -A POSTROUTING -j MASQUERADE

• Firewalld端口转发

firewall-cmd –permanent –add-forward-port=port=5678:proto=tcp:toport=22:toaddr=172.17.0.3
success
[root@JBB yum.repos.d]# firewall-cmd –reload
success
[root@JBB yum.repos.d]# firewall-cmd –list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: enp0s3
sources:
services: dhcpv6-client ssh
ports: 3000/tcp 80/tcp
protocols:
masquerade: no
forward-ports: port=5678:proto=tcp:toport=22:toaddr=172.17.0.3
sourceports:
icmp-blocks:
rich rules: