iptables实现代理功能（不解释，备忘用）

[@tc_132_12 apps]# cat forward.sh
#! /bin/sh

target_host=10.11.132.12
target_port=10086
forward_host=10.10.83.83
forward_port=8080

echo 1 > /proc/sys/net/ipv4/ip_forward
/sbin/iptables -t nat -A PREROUTING -d ${target_host} -p tcp -m tcp --dport ${target_port} -j DNAT --to-destination ${forward_host}:${forward_port}
/sbin/iptables -t nat -A POSTROUTING -d ${forward_host} -p tcp -m tcp --dport ${forward_port} -j SNAT --to-source ${target_host}


#target_host=10.11.132.12
#target_port=10086
#forward_host=10.10.83.83
#forward_port=8080
#DEMO:  http://10.11.132.12:10086/ip138.jsp  =>  http://10.10.83.83:8080/ip138.jsp
#ip138.jsp content is:
#<% out.println("You are "+request.getRemoteAddr()+":"+request.getRemotePort()); %>
[@tc_132_12 apps]#

评论

2 楼 eyesmore 2012-11-30  

service iptables status
service iptables start
iptables -t nat --list

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 9001 -j REDIRECT --to-port 9002

iptables -t nat --list
service iptables stop

1 楼 eyesmore 2012-10-11  

有的环境不支持 变量，对于iptables命令来说。增加完后，用 iptables -t nat --list查看是否配置加上； 用 --iptables -t nat --flush清楚配置，并且 echo 0 > /proc/sys/net/ipv4/ip_forward 把转发开关关闭。