Centos 端口转发

注：以下命名在root账户下运行

1、将80端口转发到Tomcat 8080端口命令

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080

2、删除80端口转发到Tomcat 8080端口命令

iptables -t nat -D PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080

注：如果防火墙重新启动，该命令就会失效，可以使用下面命令保存到iptables里面

service iptables save

执行 service iptables save 遇到如下错误The service command supports only basic LSB actions (start, stop, restart, try-restart, reload,force-reload, status)

错误原因：

With RHEL 7 / CentOS 7, firewalld was introduced to manage iptables. IMHO, 

firewalld is more suited for workstations than for server environments.

解决办法：

It is possible to go back to a more classic iptables setup.
First, stop and mask the firewalld service:
systemctl stop firewalld
systemctl mask firewalld
Then, install the iptables-services package:
yum install iptables-services
Enable the service at boot-time:
systemctl enable iptables
Managing the service
systemctl [stop|start|restart] iptables
Saving your firewall rules can be done as follows:
service iptables save