hako.paste.lol / iptables-forward · 1 month ago·

# NATの設定
sudo vi /etc/sysctl.conf

#net.ipv4.ip_forward=1
net.ipv4.ip_forward=1

sudo sysctl -p

# rules.v4

*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -p tcp --dport 25565 -j DNAT --to-destination 100.96.142.97:25565
-A PREROUTING -p udp --dport 19132 -j DNAT --to-destination 100.96.142.97:19132
-A POSTROUTING -p tcp -d 100.96.142.97 --dport 25565 -j MASQUERADE
-A POSTROUTING -p udp -d 100.96.142.97 --dport 19132 -j MASQUERADE
COMMIT

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [463:49013]
:InstanceServices - [0:0]
-A INPUT -p udp --dport 19132 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 25565 -j ACCEPT
-A FORWARD -p tcp -d 100.96.142.97 --dport 25565 -j ACCEPT
-A FORWARD -p tcp -s 100.96.142.97 --sport 25565 -j ACCEPT
-A FORWARD -p udp -d 100.96.142.97 --dport 19132 -j ACCEPT
-A FORWARD -p udp -s 100.96.142.97 --sport 19132 -j ACCEPT