Use iptables in CentOS to set port forwarding

Forward port 3389 of the local interface IP61.144.14.72 to port 3389 of 116.6.73.229 (access port 3389 of 61.144.14.72 to jump to 3389 of 116.6.6.73.229) [step] 1. The first thing to do is/etc/sysctl. net. ipv4.ip _ forward1 is 0 by default, so that the error message returned when the error message returned.
(Access port 3389 of 61.144.14.72 to jump to 3389 of 116.6.73.229)

[Step]

1. First, we should do the net. ipv4.ip _ forward = 1 in the/etc/sysctl. conf configuration file, which defaults to 0 to allow iptalbes FORWARD.

2. service IptablesStop disable firewall

3. reconfigure rules

Iptables-t nat-a prerouting -- dst 61.144.14.72-p tcp -- dport 3389-j DNAT -- to-destination 116.6.73.229: 3389
Iptables-t nat-a postrouting -- dst 116.6.73.229-p tcp -- dport 3389-j SNAT -- to-source 61.144.14.72

Service iptables save
Save the current rule to/etc/sysconfig/iptables
If you are familiar with this file, directly modifying the content here is also equivalent to the command line input rules.

5. start the iptables service and service iptables start
You can write a script to enable the device to run automatically;
# Vi/etc/rc. local
#! /Bin/sh
#
# This script will be executed * after * all the other initscripts.
# You can put your own initialization stuff in here if youdon't
# Want to do the full Sys V style init stuff.
Touch/var/lock/subsys/local
Sh/root/myshipin. log
---------------------------------------------------------------------
Vi myshipin. log

#! /Bin/sh
#
# This script will be executed * after * all the other initscripts.
# You can put your own initialization stuff in here if youdon't
# Want to do the full Sys V style init stuff.
Iptables-F-t natiptables-t nat-a prerouting -- dst 61.144.14.72-p tcp -- dport3389-j DNAT -- to-destination 116.6.73.229: 3389
Iptables-t nat-a postrouting -- dst 116.6.73.229-p tcp -- dport 3389-j SNAT -- to-source 61.144.14.72
~

----------------------------------------------------------------
TCP
Iptables-t nat-a prerouting -- dst 61.144.14.87-p tcp -- dport9304-j DNAT -- to-destination 10.94.143.204: 9304
Iptables-t nat-a postrouting -- dst 10.94.143.204-p tcp -- dport9304-j SNAT -- to-source 61.144.14.87
UDP
Iptables-t nat-a prerouting -- dst61.144.14.87-p udp -- dport 9305-j DNAT -- to-destination10.94.143.204: 9305
Iptables-t nat-a postrouting -- dst 10.94.143.204-p udp -- dport9305-j SNAT -- to-source 61.144.14.87