Simple iptables forwarding 8080 -> 80

gstarrett · 02-21-2004, 05:50 PM

I am running RH9 on an internal network with the "no firewall" setting (iptables is running but all set to ACCEPT). I want to run an app (DVArchive) as a non-root user that needs to be served as a web server on port 80 (so that my ReplayTV will see it). I need to configure my system to redirect any incoming traffic on port 80 to the internal port 8080.

[DVArchive, listening on 8080] <-- [iptables?] <-- [outside world talking to port 80]

I've been reading the man pages and some web sources but am getting confused.

1) How would I configure iptables to allow this port redirection?

2) Do I need to do anything special to get it to maintain this configuration on a full restart? I see iptables-save will output a script for me, but do I need to arrainge for that script to be run on startup?

Here's my current config:

Code:

# Generated by iptables-save v1.2.8 on Sat Feb 21 16:48:21 2004
*nat
:PREROUTING ACCEPT [69:13797]
:POSTROUTING ACCEPT [126:11110]
:OUTPUT ACCEPT [126:11110]
COMMIT
# Completed on Sat Feb 21 16:48:21 2004
# Generated by iptables-save v1.2.8 on Sat Feb 21 16:48:21 2004
*filter
:INPUT ACCEPT [27746319:27592651327]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [24155831:26802970577]
COMMIT
# Completed on Sat Feb 21 16:48:21 2004

Thanks in advance!

peter_robb · 02-25-2004, 04:22 AM

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080

To store it for rebooting,
service iptables save

gstarrett · 02-25-2004, 09:14 PM

Thanks--I'll try that when I get back (I'm out of town ATM). I assume from the answer that there's nothing special I need to do for the default "accept" level, correct? (I wasn't sure if I needed to change default to "deny" then apply my rule then accept whatever is left).

Thanks again,

gstarrett · 03-17-2004, 12:52 PM

That worked exactly as I had hoped it would. Thanks again!

...iptables are sweet...