With netcat it is possible to proxy arbitrary ip:port destination pairs. Could this be done with netfilter rules entirely? As an example, I have a host that listens for incoming tcp connections on port 110 and I want to forward them to port 5900 on another host transparently. Obviously ftp and any other multichannel protocols would have complications, but that's not a problem for my situation.