redirect traffic with iptables to local port
up vote
0
down vote
favorite
I have a machine IP1 that sends packets to port 54321 of IP2. I want to redirect this requests to a port 8080 of IP1 before these packets leave machine IP1 and go to IP2. This means I need to filter outcoming traffic.
I tried answers from related questions but this does not help:
iptables -t nat -A OUTPUT -p tcp -d IP1 --dport 54321 -j REDIRECT --to-ports 8080
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
Reading definitions of DNAT and REDIRECT still leave me confused what should work here.
redirect iptables nat
asked Nov 19 at 11:52
Anastasiya Ruzhanskaya
131118
add a comment |
up vote
0
down vote
favorite
I have a machine IP1 that sends packets to port 54321 of IP2. I want to redirect this requests to a port 8080 of IP1 before these packets leave machine IP1 and go to IP2. This means I need to filter outcoming traffic.
I tried answers from related questions but this does not help:
iptables -t nat -A OUTPUT -p tcp -d IP1 --dport 54321 -j REDIRECT --to-ports 8080
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
Reading definitions of DNAT and REDIRECT still leave me confused what should work here.
redirect iptables nat
asked Nov 19 at 11:52
Anastasiya Ruzhanskaya
131118
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I have a machine IP1 that sends packets to port 54321 of IP2. I want to redirect this requests to a port 8080 of IP1 before these packets leave machine IP1 and go to IP2. This means I need to filter outcoming traffic.
I tried answers from related questions but this does not help:
iptables -t nat -A OUTPUT -p tcp -d IP1 --dport 54321 -j REDIRECT --to-ports 8080
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
Reading definitions of DNAT and REDIRECT still leave me confused what should work here.
redirect iptables nat
asked Nov 19 at 11:52
Anastasiya Ruzhanskaya
131118
I have a machine IP1 that sends packets to port 54321 of IP2. I want to redirect this requests to a port 8080 of IP1 before these packets leave machine IP1 and go to IP2. This means I need to filter outcoming traffic.
I tried answers from related questions but this does not help:
iptables -t nat -A OUTPUT -p tcp -d IP1 --dport 54321 -j REDIRECT --to-ports 8080
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
Reading definitions of DNAT and REDIRECT still leave me confused what should work here.
redirect iptables nat
redirect iptables nat
asked Nov 19 at 11:52
Anastasiya Ruzhanskaya
131118
asked Nov 19 at 11:52
Anastasiya Ruzhanskaya
131118
edited Nov 19 at 12:09
asked Nov 19 at 11:52
Anastasiya Ruzhanskaya
131118
asked Nov 19 at 11:52
Anastasiya Ruzhanskaya
131118
asked Nov 19 at 11:52
Anastasiya Ruzhanskaya
131118
131118
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
up vote
0
down vote
accepted
Edit:
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
answered Nov 19 at 12:00
Spirit
656
New contributor
Spirit is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
According to this link PREROUTING works for incoming, not for outcoming traffic. And I have outcoming
– Anastasiya Ruzhanskaya
Nov 19 at 12:04
But if you change the source ip to 127.0.0.1 you send rewrite all packages from 127.0.0.1:54321 to 127.0.0.1:8080
– Spirit
Nov 19 at 12:09
This does not work:( I have mitmproxy on port 8080 on IP1 machine and want to forward him these packets before they are sent to another machine IP2. When I do the written command , no packets are printed with mitmproxy.
– Anastasiya Ruzhanskaya
Nov 19 at 12:18
1
Try this:iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
– Spirit
Nov 19 at 12:23
Seems that worked finally:) Thanks
– Anastasiya Ruzhanskaya
Nov 19 at 12:33
|
show 1 more comment
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
0
down vote
accepted
Edit:
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
answered Nov 19 at 12:00
Spirit
656
New contributor
Spirit is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
According to this link PREROUTING works for incoming, not for outcoming traffic. And I have outcoming
– Anastasiya Ruzhanskaya
Nov 19 at 12:04
But if you change the source ip to 127.0.0.1 you send rewrite all packages from 127.0.0.1:54321 to 127.0.0.1:8080
– Spirit
Nov 19 at 12:09
This does not work:( I have mitmproxy on port 8080 on IP1 machine and want to forward him these packets before they are sent to another machine IP2. When I do the written command , no packets are printed with mitmproxy.
– Anastasiya Ruzhanskaya
Nov 19 at 12:18
1
Try this:iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
– Spirit
Nov 19 at 12:23
Seems that worked finally:) Thanks
– Anastasiya Ruzhanskaya
Nov 19 at 12:33
|
show 1 more comment
up vote
0
down vote
accepted
Edit:
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
answered Nov 19 at 12:00
Spirit
656
New contributor
Spirit is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
According to this link PREROUTING works for incoming, not for outcoming traffic. And I have outcoming
– Anastasiya Ruzhanskaya
Nov 19 at 12:04
But if you change the source ip to 127.0.0.1 you send rewrite all packages from 127.0.0.1:54321 to 127.0.0.1:8080
– Spirit
Nov 19 at 12:09
This does not work:( I have mitmproxy on port 8080 on IP1 machine and want to forward him these packets before they are sent to another machine IP2. When I do the written command , no packets are printed with mitmproxy.
– Anastasiya Ruzhanskaya
Nov 19 at 12:18
1
Try this:iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
– Spirit
Nov 19 at 12:23
Seems that worked finally:) Thanks
– Anastasiya Ruzhanskaya
Nov 19 at 12:33
|
show 1 more comment
up vote
0
down vote
accepted
up vote
0
down vote
accepted
Edit:
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
answered Nov 19 at 12:00
Spirit
656
New contributor
Spirit is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Edit:
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
answered Nov 19 at 12:00
Spirit
656
New contributor
Spirit is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited Nov 19 at 12:23
answered Nov 19 at 12:00
Spirit
656
New contributor
Spirit is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered Nov 19 at 12:00
Spirit
656
answered Nov 19 at 12:00
Spirit
656
656
New contributor
Spirit is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Spirit is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Spirit is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
According to this link PREROUTING works for incoming, not for outcoming traffic. And I have outcoming
– Anastasiya Ruzhanskaya
Nov 19 at 12:04
But if you change the source ip to 127.0.0.1 you send rewrite all packages from 127.0.0.1:54321 to 127.0.0.1:8080
– Spirit
Nov 19 at 12:09
This does not work:( I have mitmproxy on port 8080 on IP1 machine and want to forward him these packets before they are sent to another machine IP2. When I do the written command , no packets are printed with mitmproxy.
– Anastasiya Ruzhanskaya
Nov 19 at 12:18
1
Try this:iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
– Spirit
Nov 19 at 12:23
Seems that worked finally:) Thanks
– Anastasiya Ruzhanskaya
Nov 19 at 12:33
|
show 1 more comment
According to this link PREROUTING works for incoming, not for outcoming traffic. And I have outcoming
– Anastasiya Ruzhanskaya
Nov 19 at 12:04
But if you change the source ip to 127.0.0.1 you send rewrite all packages from 127.0.0.1:54321 to 127.0.0.1:8080
– Spirit
Nov 19 at 12:09
This does not work:( I have mitmproxy on port 8080 on IP1 machine and want to forward him these packets before they are sent to another machine IP2. When I do the written command , no packets are printed with mitmproxy.
– Anastasiya Ruzhanskaya
Nov 19 at 12:18
1
Try this:iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080
– Spirit
Nov 19 at 12:23
Seems that worked finally:) Thanks
– Anastasiya Ruzhanskaya
Nov 19 at 12:33
According to this link PREROUTING works for incoming, not for outcoming traffic. And I have outcoming
– Anastasiya Ruzhanskaya
Nov 19 at 12:04
According to this link PREROUTING works for incoming, not for outcoming traffic. And I have outcoming
– Anastasiya Ruzhanskaya
Nov 19 at 12:04
But if you change the source ip to 127.0.0.1 you send rewrite all packages from 127.0.0.1:54321 to 127.0.0.1:8080
– Spirit
Nov 19 at 12:09
But if you change the source ip to 127.0.0.1 you send rewrite all packages from 127.0.0.1:54321 to 127.0.0.1:8080
– Spirit
Nov 19 at 12:09
This does not work:( I have mitmproxy on port 8080 on IP1 machine and want to forward him these packets before they are sent to another machine IP2. When I do the written command , no packets are printed with mitmproxy.
– Anastasiya Ruzhanskaya
Nov 19 at 12:18
This does not work:( I have mitmproxy on port 8080 on IP1 machine and want to forward him these packets before they are sent to another machine IP2. When I do the written command , no packets are printed with mitmproxy.
– Anastasiya Ruzhanskaya
Nov 19 at 12:18
1
1
Try this:
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080– Spirit
Nov 19 at 12:23
Try this:
iptables -t nat -A OUTPUT -p tcp --dport 54321 -j DNAT --to-destination 127.0.0.1:8080– Spirit
Nov 19 at 12:23
Seems that worked finally:) Thanks
– Anastasiya Ruzhanskaya
Nov 19 at 12:33
Seems that worked finally:) Thanks
– Anastasiya Ruzhanskaya
Nov 19 at 12:33
|
show 1 more comment
draft saved
draft discarded
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53374082%2fredirect-traffic-with-iptables-to-local-port%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
