Re: Port DNATting

[Georgi Alexandrov <georgi.alexandrov@gmail.com>]

Oleg A. Arkhangelsky wrote:

>Hello All,
>
>  When I'm trying to do something like this:
>
>  iptables -t nat -I POSTROUTING -p tcp --dport 8080 -j DNAT --to :80
>
>  I get: "iptables: Invalid argument".
>
>  What I want is only to translate destination port of all TCP-packets
>  going to some_ip:8080 into some_ip:80. I don't want to change IP. It
>  seems that syntax of this command is corrent, but... What is wrong?
>
>  Thanks!
>
>  P.S.: Kernel 2.4.31, iptables v1.3.2
>
>  
>
If you want to do that you should read the 
iptables-tutorial.frozentux.net, then use the REDIRECT target:
iptables -t nat -A PREROUTING -p tcp --dport 8080 -j REDIRECT --to 80

regards,
Georgi Alexandrov