总结&备忘:端口转发

到本地TCP端口8888转发到10.0.1.100:9999

firewalld(centos7)

[root@localhost ~]# firewall-cmd --add-forward-port=port=8888:proto=tcp:toport=9999:toaddr=10.0.1.100 --permanent

success

[root@localhost ~]# firewall-cmd --add-masquerade --permanent

success 

iptables(centos6)

开启转发

[root@localhost ~]# sed -i 's/net.ipv4.ip_forward = 0/net.ipv4.ip_forward = 1/g' /etc/sysctl.conf

[root@localhost ~]# sysctl –p

配置转发

[root@localhost ~]# iptables -t nat -A PREROUTING -p tcp --dport 8888 -j DNAT --to 10.0.1.100:9999

[root@localhost ~]# iptables -t nat -A POSTROUTING -d 10.0.1.100 -p tcp --dport 9999 -j MASQUERADE

[root@localhost ~]# service iptables save

[root@localhost ~]# service iptables restart

netsh(windows)

C:\Users\Administrator>netsh interface portproxy add v4tov4 listenaddress=* listenport=8888 connectaddress=10.0.1.100 connectport=9999