How to forward port using iptables in Linux

Quick article to demonstrate how to configure port forwarding in Linux using iptables.

In this article, we will walk you through port forwarding using iptables in Linux. First of all you need to check if port forwarding is enabled or not on your server. For better understanding, we will be using eth0 as a reference interface and all our command executions will be related to eth0 in this article.

How to check if port forwarding is enabled in Linux

Either you can use sysctl to check if forwarding is enabled or not. Use below command to check –

Since both values are zero, port forwarding is disabled for ipv4 and ipv6 on interface eth0.

Or you can use process filesystem to check if port forwarding is enabled or not.

Again here process FS with zero values confirms port forwarding is disabled on our system. Now we need to first enable port forwarding on our system then we will configure port forwarding rules in iptables.

How to enable port forwarding in Linux

As we checked above, using same both methods you can enable port forwarding in Linux. But its recommended to use sysctl command rather than replacing 0 by 1 in proc files.

Enable port forwarding in Linux using sysctl command –

To make it persistent over reboots, add parameters in /etc/sysctl.conf

Now, we have port forwarding enabled on our server, we can go ahead with configuring port forwarding rules using iptables.

How to forward port in Linux

Here we will forward port 80 to port 8080 on 172.31.40.29. Do not get confused port forwarding with port redirection.

We need to insert an entry in PREROUTING chain of iptables with DNAT target. Command will be as follows –

Change interface, ip and ports as per your requirement. First command tell to redirect packets coming to port 80 to IP 172.31.40.29 on port 8080. Now packet also needs to go through FORWARD chain so we are allowing in in second command.

Now rules have been applied. You need to verify them.

How to check port forwarding iptables rules

Command to verify port forwarding rules is –

Here REDIRECT target means its a redirection rule. Since we have configured forwarding rule we see target as DNAT

How to save iptables rules

To save iptables rules and make them persistent over reboots use below command –