Friends,
Recently I implemented firewall rule for incoming traffic on
port 80 on firewall (10.10.0.100) will redirect to port 8080 of internal
webserver(172.24.40.110).
Below is the command that I executed on my Linux based
Firewall
[root@station-z ]#iptables -t nat -I PREROUTING-p tcp
--dport 80 -d 10.10.0.100 -j DNAT --to 172.24.40.110:8080
One point I also want to add that if in LAN Network, Any one hit on http://10.10.0.100.
ReplyDeleteThen in this case they can easily trap that origin of this source would be 172.24.40.110.
To hide this we could also implement NAT for all packets originating from 172.24.40.110 should NAT to 10.10.0.100.
Below is Iptable command for the same.
[root@station-z ]#iptables -t nat -I POSTROUTING -p tcp --sport 80 -s 172.24.40.110 -j SNAT --to-source 10.10.0.100