Iptables to ASA help

[eric.lovelace]

I am migrating ubuntu iptables to ASA and since I am not a linux/iptables expert I am having trouble following the nat rules. Can someone hook me up and convert the following for 8.4

#$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp -d 216.68.4.12 --dport 80 -j DNAT --to 10.2.53.131

#$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp -d 216.68.4.12 --dport 443 -j DNAT --to 10.2.53.131

#$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp -d 216.68.4.12 --dport 80 -j DNAT --to 172.28.18.68:8080

$IPTABLES -t nat -A POSTROUTING -o eth4 -d 216.68.4.101 -j SNAT --to-source 192.168.130.1

$IPTABLES -t nat -A PREROUTING -i eth0 -s 20.6.192.3 -d 216.68.4.11 -j DNAT --to 10.2.11.20

$IPTABLES -t nat -A PREROUTING -i eth0 -s 20.19.241.1 -d 216.68.4.11 -j DNAT --to 10.2.11.20

$IPTABLES -t nat -A PREROUTING -i eth0 -s 12.16.16.65 -d 216.68.4.6 -j DNAT --to 10.2.11.20

$IPTABLES -t nat -A POSTROUTING -o eth0 -s 10.23.11.20 -d 12.163.16.65 -j SNAT --to-source 216.68.4.6

Thanks!

[lcambron]

Hello Eric,

I'm not a linux guy but maybe if you tell us what this lines are supuse to acomplish, we can help.

The first ones(1 to 3) seem to be port forwarding:

Traffic going to 216.68.4.12 on port 80 is tranlated to 10.2.53.131

object network obj-10.2.53.131

host 10.2.53.131

nat (inside,outside) static 216.68.4.12 service tcp 80 80

I will need more information about what the others do so we can migrate them.

Regards,

Felipe.