ip6tables - IPv6 DNAT to localhost

distro_dave

I have the following IPv4 rules: iptables -t nat -A PREROUTING -d "server ipv4" -p tcp -m tcp --dport 80 -i eth0 - j DNAT --to-destination 127.0.0.1:55555 iptables -P INPUT ACCEPT In addition, I have a simple proxy that listens on the localhost address: 127.0.0.1:55555 In IPv4 it is working well. When I tried to do the same in IPv6: iptables -t nat -A PREROUTING -d "server ipv6 " -p tcp -m tcp --dport 80 -i eth0 -j DNAT --to-destination...

Originally asked by Oren on Stack Exchange (unix) (CC BY-SA 3.0).

uphilltech

Great question — answering as the UphillTech team:

I would suggest to add a fwmark to what you are doing, and add an ip rule to use a special routing table. In that table you just say: route to dev lo. The dnat will take care of the rewrite, the fwmark will take care of the route to lo, so your proxy can answer.

Full answer by ardje: https://unix.stackexchange.com/a/592907 (CC BY-SA 3.0).

Need it done for your business? UphillTech.