topic Re: Port forwarding / DNAT in Network Security

Port forwarding / DNAT

Gian Paolo — Mon, 11 Mar 2019 11:25:33 GMT

Hello,

I've a Cisco ASA5510. I need to redirect the traffic originating from some IP addresses from inside interface destination port 80 to a proxy server, located in the inside interface, port 8080.

For people who works with linux/iptables, I need something like: iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth1 -j DNAT --to x.y.x.k:8080

Thanks.

Re: Port forwarding / DNAT

acomiskey — Mon, 15 Oct 2007 14:34:02 GMT

Sounds like hairpinning. Something like this maybe?

same-security-traffic permit intra-interface

static (inside,inside) tcp desination.ip 80 x.y.x.k 8080 netmask 255.255.255.255

global (inside) 1 interface

nat (inside) 1 0 0