So, not concerning ourselves with the WHY, and more so with the HOW, I'd like to see if anyone knows where I'm going wrong here.
Basically, I'd like to forward all packets headed for port 80 on an IP that I've aliased to the loopback device (169.254.169.254) to be forwarded to port 8080 on another IP, which happens to be the public IP of the same box (we'll use 220.127.116.11 for the purpose of this question). In doing so, I should [ostensbily] be able to run
telnet 169.254.169.254 80
and reach 18.104.22.168:8080, however, this is not happening.
Here is my nat table in iptables:
~# iptables -nvL -t nat Chain PREROUTING (policy ACCEPT 66 packets, 3857 bytes) pkts bytes target prot opt in out source destination 0 0 DNAT tcp -- * * 0.0.0.0/0 169.254.169.254 tcp dpt:80 to:22.214.171.124:8080 Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination
Am I missing something? I've followed most the information in the iptables man pages and also in the links below, however, am still getting a "connection refused" during my telnet attempts. I have tried adding
~#iptables -t nat -A POSTROUTING -j MASQUERADE to my iptables, but to no avail :/
If anyone could point me in the right direction that would be phenomenal!
EDIT I wanted to add that I do indeed have the following sysctl parameter enabled
~# sysctl net.ipv4.ip_forward
net.ipv4.ip_forward = 1
EDIT No. 2 I was able to solve this by adding the rule to the OUTPUT chain in the nat table, v.s. the PREROUTING chain as I originally tried.