Re: [DNAT] Port forwarding with Port range

[Mokhtar BEN MESSAOUD <mbmessaoud@gmail.com>]

I tried and it does not work
iptables -t nat -A PREROUTING -p tcp --dport 1000:2000 -j DNAT
--to-destination 192.168.1.100:3000   ==> Ok all traffic received with
destination port in  1000:2000  is redirected to 192.168.1.100:3000

but iptables -t nat -A PREROUTING -p tcp --dport 1000:2000 -j DNAT
--to-destination 192.168.1.100:3000-4000  ==> does not work : no
traffic is redirected

it seem a known issue : https://bugzilla.netfilter.org/show_bug.cgi?id=1501
issue with DNAT port range

Le mar. 26 nov. 2024 à 18:36, Alex K <rightkicktech@gmail.com> a écrit :
>
> Yes, that should be possible.
>
> On Tue, 26 Nov 2024 at 4:46 PM, Mokhtar BEN MESSAOUD <mbmessaoud@gmail.com> wrote:
>>
>> is it possible to use iptables to define a rule to make a port
>> forwarding of a range of ports
>> For example :
>> iptables -t nat -A PREROUTING -p tcp --dport 1000:2000 -j DNAT
>> --to-destination 192.168.1.100:3000-4000
>>
>> so traffic for port 1000 will be redirected to port 3000
>> and traffic for port 1000+n ==> 3000+N
>>