IP-Tables¶

Configure¶

save all the current rules

Note: iptables rules file must be in path /etc/iptables/

sudo iptables-save > /etc/iptables/rules.v4

restore the saved rules

sudo iptables-restore /etc/iptables/rules.v4

Note: iptables-persistent reads ipt-rules from path /etc/iptables/

sudo apt install iptables-persistent

make sure services are enabled on Debian or Ubuntu using the systemctl

sudo systemctl is-enabled netfilter-persistent.service

If not enable it

sudo systemctl enable netfilter-persistent.service

get status

sudo systemctl status netfilter-persistent.service

forward SSH port from proxy machine

sudo iptables -t nat -A PREROUTING  -d 172.16.2.20/32 -i vmbr0 -p tcp -m tcp --dport 22150 -j DNAT --to-destination 192.168.1.150:22

masquerade "SNAT" packages

sudo iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -o vmbr0 -j MASQUERADE