I am wondering weather this is possible. I have one port and one public IP address lets say: 34.123.22.33:5615 If I connect using SSH I want to DNAT to port 22, if I connect using SSL I want to DNAT to port 443, if I connect using HTTP I want to DNAT to port 80. If this kind of upper layer protocol determination possible? If so, is netfiter the application to do it?