Let' say we have two instances of webserver listening on port 80 and 81 and I want to seamlessly redirect customer traffic without losing any packets from instance1 to instance2.
My understanding that simple NEW match would work.Is it correct?

$ iptables -A PREROUTING -t nat -p tcp --dport 80 -m state --state NEW -j REDIRECT --to-port 81

I expect old connection to be open until they are closed and any new connections would be redirected to the new port.

link|improve this question

73% accept rate
feedback

1 Answer

up vote 0 down vote accepted

Don't forget to also allow input on the port you're redirecting to.

--iptables -A INPUT -p tcp --dport 81 -j ACCEPT
link|improve this answer
Thank you Peter, my assumption was that no other rules are in place – Sergei Sep 22 '11 at 8:38
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.