Port forwarding / DNAT

[Gian Paolo]

Hello,

I've a Cisco ASA5510. I need to redirect the traffic originating from some IP addresses from inside interface destination port 80 to a proxy server, located in the inside interface, port 8080.

For people who works with linux/iptables, I need something like: iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth1 -j DNAT --to x.y.x.k:8080

Thanks.

[acomiskey]

Sounds like hairpinning. Something like this maybe?

same-security-traffic permit intra-interface

static (inside,inside) tcp desination.ip 80 x.y.x.k 8080 netmask 255.255.255.255

global (inside) 1 interface

nat (inside) 1 0 0