Currently using the following rule to route one (1) WAN IP to one (1) LAN IP address: (addresses have been adjusted for security)
/usr/sbin/ip addr add 77.333.207.114/25 dev vlan1 brd +
/usr/sbin/iptables -I PREROUTING -t nat -d 77.333.207 -j DNAT --to-destination 10.0.1.7
/usr/sbin/iptables -I POSTROUTING -t nat -s 10.0.1.7 -j SNAT --to 77.333.207
/usr/sbin/iptables -I FORWARD -d 10.0.1.7 -p tcp -m multiport --dports 25,3101,80,7080,7443,7005,
443,2080,2
081,2082 -j ACCEPT
This works well for forwarding all ports to just one internal LAN address. However, we'd like to forward the first four ports, 25,3101,80,7080, to an ADDITIONAL internal LAN address. So how could I modify the above rule to forward different ports to two (2) different internal LAN IP addresses? Would this require a seperate vlan e.g. vlan2 (/usr/sbin/ip addr add 77.333.207.114/25 dev vlan2 brd +)?
Thank you in advance.
PCL
NSS39759
Start Free Trial
