<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Iptables to ASA help in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/iptables-to-asa-help/m-p/2094028#M395453</link>
    <description>&lt;P&gt;I am migrating ubuntu iptables to ASA and since I am not a linux/iptables expert I am having trouble following the nat rules. Can someone hook me up and convert the following for 8.4&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;#$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp -d 216.68.4.12 --dport 80 -j DNAT --to 10.2.53.131 &lt;/P&gt;&lt;P&gt;#$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp -d 216.68.4.12 --dport 443 -j DNAT --to 10.2.53.131&lt;/P&gt;&lt;P&gt;#$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp -d 216.68.4.12 --dport 80 -j DNAT --to 172.28.18.68:8080&lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A POSTROUTING -o eth4 -d 216.68.4.101 -j SNAT --to-source 192.168.130.1 &lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A PREROUTING -i eth0 -s 20.6.192.3 -d 216.68.4.11 -j DNAT --to 10.2.11.20&lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A PREROUTING -i eth0 -s 20.19.241.1 -d 216.68.4.11 -j DNAT --to 10.2.11.20&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A PREROUTING -i eth0 -s 12.16.16.65 -d 216.68.4.6 -j DNAT --to 10.2.11.20&lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A POSTROUTING -o eth0 -s 10.23.11.20 -d 12.163.16.65 -j SNAT --to-source 216.68.4.6&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;</description>
    <pubDate>Tue, 12 Mar 2019 00:24:52 GMT</pubDate>
    <dc:creator>eric.lovelace</dc:creator>
    <dc:date>2019-03-12T00:24:52Z</dc:date>
    <item>
      <title>Iptables to ASA help</title>
      <link>https://community.cisco.com/t5/network-security/iptables-to-asa-help/m-p/2094028#M395453</link>
      <description>&lt;P&gt;I am migrating ubuntu iptables to ASA and since I am not a linux/iptables expert I am having trouble following the nat rules. Can someone hook me up and convert the following for 8.4&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;#$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp -d 216.68.4.12 --dport 80 -j DNAT --to 10.2.53.131 &lt;/P&gt;&lt;P&gt;#$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp -d 216.68.4.12 --dport 443 -j DNAT --to 10.2.53.131&lt;/P&gt;&lt;P&gt;#$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp -d 216.68.4.12 --dport 80 -j DNAT --to 172.28.18.68:8080&lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A POSTROUTING -o eth4 -d 216.68.4.101 -j SNAT --to-source 192.168.130.1 &lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A PREROUTING -i eth0 -s 20.6.192.3 -d 216.68.4.11 -j DNAT --to 10.2.11.20&lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A PREROUTING -i eth0 -s 20.19.241.1 -d 216.68.4.11 -j DNAT --to 10.2.11.20&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A PREROUTING -i eth0 -s 12.16.16.65 -d 216.68.4.6 -j DNAT --to 10.2.11.20&lt;/P&gt;&lt;P&gt;$IPTABLES -t nat -A POSTROUTING -o eth0 -s 10.23.11.20 -d 12.163.16.65 -j SNAT --to-source 216.68.4.6&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2019 00:24:52 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/iptables-to-asa-help/m-p/2094028#M395453</guid>
      <dc:creator>eric.lovelace</dc:creator>
      <dc:date>2019-03-12T00:24:52Z</dc:date>
    </item>
    <item>
      <title>Iptables to ASA help</title>
      <link>https://community.cisco.com/t5/network-security/iptables-to-asa-help/m-p/2094029#M395454</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello Eric,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I'm not a linux guy but maybe if you tell us what this lines are supuse to acomplish, we can help.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;The first ones(1 to 3) seem to be port forwarding:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Traffic going to 216.68.4.12 on port 80 is tranlated to 10.2.53.131&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;object network obj-10.2.53.131&lt;/P&gt;&lt;P&gt;host 10.2.53.131&lt;/P&gt;&lt;P&gt;nat (inside,outside) static 216.68.4.12 service tcp 80 80&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I will need more information about what the others do so we can migrate them.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Felipe. &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 20 Nov 2012 03:33:59 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/iptables-to-asa-help/m-p/2094029#M395454</guid>
      <dc:creator>lcambron</dc:creator>
      <dc:date>2012-11-20T03:33:59Z</dc:date>
    </item>
  </channel>
</rss>

