-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
iptables -t nat -A PREROUTING -p tcp --dport <port> -i eth0 -j REDIRECT --to-port <port>
iptables -t nat -A PREROUTING -p tcp --dport <port> -i eth0 -j REDIRECT --to-port <port>