RHCE-配置端口转发

本题是server配置端口转发，desktop进行访问验证

server配置

[root@server0 ~]# iptables -t nat -A PREROUTING -s 172.25.0.0/24 -p tcp --dport 5423 -j DNAT --to-destination :80     增加端口转发策略，-t nat设置nat转发，--dport源端口

[root@server0 ~]# iptables -t nat -L             查看NAT策略配置

Chain PREROUTING (policy ACCEPT)

target     prot    opt          source               destination         

DNAT       tcp     --        172.25.0.0/24        anywhere             tcp dpt:virtualuser to::80

 

Chain INPUT (policy ACCEPT)

target     prot opt source                          destination         

 

Chain OUTPUT (policy ACCEPT)

target     prot opt source                          destination         

 

Chain POSTROUTING (policy ACCEPT)

target     prot opt source                          destination         

[root@server0 ~]# service iptables save             保存策略

iptables: Saving firewall rules to /etc/sysconfig/iptables:[  OK  ]

[root@server0 ~]# yum install httpd –y             安装http包文件

[root@server0 ~]# systemctl enable httpd.service              启动http服务（开机自启）

ln -s '/usr/lib/systemd/system/httpd.service' '/etc/systemd/system/multi-user.target.wants/httpd.service'

 [root@server0 ~]# systemctl start httpd.service              开启http服务

 [root@server0 ~]# vim /var/www/html/index.html          配置一个网页信息（测试内容可随意编辑，如下图）

 

Desktop验证

[root@desktop0 ~]# yum install links                     安装link包文件

[root@desktop0 ~]# links http://server0.example.com:5423  访问server的5423端口，如下图（或直接浏览器访问）