I tried and it does not work iptables -t nat -A PREROUTING -p tcp --dport 1000:2000 -j DNAT --to-destination 192.168.1.100:3000 ==> Ok all traffic received with destination port in 1000:2000 is redirected to 192.168.1.100:3000 but iptables -t nat -A PREROUTING -p tcp --dport 1000:2000 -j DNAT --to-destination 192.168.1.100:3000-4000 ==> does not work : no traffic is redirected it seem a known issue : https://bugzilla.netfilter.org/show_bug.cgi?id=1501 issue with DNAT port range Le mar. 26 nov. 2024 à 18:36, Alex K <rightkicktech@xxxxxxxxx> a écrit : > > Yes, that should be possible. > > On Tue, 26 Nov 2024 at 4:46 PM, Mokhtar BEN MESSAOUD <mbmessaoud@xxxxxxxxx> wrote: >> >> is it possible to use iptables to define a rule to make a port >> forwarding of a range of ports >> For example : >> iptables -t nat -A PREROUTING -p tcp --dport 1000:2000 -j DNAT >> --to-destination 192.168.1.100:3000-4000 >> >> so traffic for port 1000 will be redirected to port 3000 >> and traffic for port 1000+n ==> 3000+N >>
