I was experimenting with iptables and I have two PREROUTING records I need to now delete. I have looked for some time on how to delete these, but can't seem to do it. I need to delete both the INPUT and OUTPUT DNAT strings.


iptables -t nat -L -n -v --line-numbers
-----------------------------

Chain PREROUTING (policy ACCEPT 5207 packets, 301K bytes)
num pkts bytes target prot opt in out source destination
1 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 65.49.14.58 tcp dpt:80 to:188.40.76.149:80

Chain INPUT (policy ACCEPT 5202 packets, 301K bytes)
num pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 24680 packets, 1670K bytes)
num pkts bytes target prot opt in out source destination
1 0 0 DNAT all -- * * 0.0.0.0/0 65.49.14.58 /* Test redirect */ to:188.40.76.149

Chain POSTROUTING (policy ACCEPT 24680 packets, 1670K bytes)
num pkts bytes target prot opt in out source destination

What have you tried so far and what happened when you tried it?

I think 'iptables -t nat -D INPUT 1' and 'iptables -t nat -D OUTPUT 1' might do the trick.

Posting from mobile, so I don't have a way to rest right now.

This one worked:

iptables -t nat -D OUTPUT 1

got rid of:

Chain OUTPUT (policy ACCEPT 51527 packets, 3466K bytes)
num pkts bytes target prot opt in out source destination
1 0 0 DNAT all -- * * 0.0.0.0/0 65.49.14.58 /* Test redirect */ to:188.40.76.149



This one:

iptables -t nat -D INPUT 1

Gets this error:

iptables: Index of deletion too big.



Through deduction, this was tried and worked:

iptables -t nat -D PREROUTING 1

got rid of:

Chain PREROUTING (policy ACCEPT 14 packets, 812 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 65.49.14.58 tcp dpt:80 to:188.40.76.149:80



I thought I had tried something like this, but it didn't work. It could be that the OUTPUT had to be deleted first.
Thanks for the help!

Happy to help!

Mark this sucker as solved.