1

Cant forward port 443 to 8443 without allowing 8443 on ufw

view story
linux-howto

http://serverfault.com – I configured port forwarding through iptables and ufw. But there is something I do not understand, I just cant get iptables to forward port 443 to 8443 without allowing port 8443 on UFW. I want port 443 to forward to port 8443 but I also want port 8443 to be disallowed from outside my network. In resume, I can only forward port 443 to 8443 if I fully allow both ports 443 and 8443 on UFW. This is the only rule I have in before.rules: -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8443 This is my iptables routing config (really simple): pkts bytes target prot opt in (HowTos)

taskli's picture
Submitted by taskli on 08/19/2012

Stories similar to Cant forward port 443 to 8443 without allowing 8443 on ufw

Port forwarding not working 1 year 36 weeks ago

I am attempting to forward port 443 to port 8443 but I am having no luck. I have used the firewall configuration tool system-config-firewall-tui. I have followed the instructions... [by fjohnson]

Squid Cache and HTTPS problem 2 years 27 weeks ago

Hi everybody,

I have a squid acceleration server, that is the frontend to some of my backend web servers.

Wanted to see if anyone else has ever come across this. I have an ftp server running on RHEL 5.5 64-bit.

Possible Duplicate: iptables: forward port 80 to port 8080

I'd like to forward port 80 to 8080. So I tried to edit /etc/syscongfig/iptables:

-A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080

But got:

# service iptables restart iptables: Flushing firewall rules: [ OK ] iptables: Setting chains to policy ACCEPT: filter [ OK

I'm new to this so please go easy on me.

I cant pass a PCI compliance scan. Could someone tell me what's happening, if this is even a Plesk issue, or an Apache issue?

I guess what's happening is my domain with an IP of it's own & SSL certificate of its own, resolve to my servers IP so I fail the scan.

I have an existing iptables setup that does port forwarding. In this port forwarding scenario there are some instances where I do not want it to port forward. So, for instance I have this defined:

iptables -A PREROUTING -t nat -i eth0 '!' -s 10.200.0.0/16 -p tcp --dport 80 -j DNAT --to 10.200.30.11

This will prevent 10.200/16 from accessing this rule.

i have this iptables and working.

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 0:20 -j REDIRECT --to-port 8080 #bypass SSH iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 23:442 -j REDIRECT --to-port 8080 #bypass SSL iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 444:2082 -j REDIRECT --to-port 8080 #Cpanel SSL iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 2084:2086 -j RE

I have squide with dansguardian on a laptop and need to have incoming port 80 forwarded to 8080 so that even if the user tries to change the proxy setting it will still go to port 8080.

I'm using my home server as NAT/router, which works well.