Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Let' say we have two instances of webserver listening on port 80 and 81 and I want to seamlessly redirect customer traffic without losing any packets from instance1 to instance2.
My understanding that simple NEW match would work.Is it correct?

$ iptables -A PREROUTING -t nat -p tcp --dport 80 -m state --state NEW -j REDIRECT --to-port 81

I expect old connection to be open until they are closed and any new connections would be redirected to the new port.

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

Don't forget to also allow input on the port you're redirecting to.

--iptables -A INPUT -p tcp --dport 81 -j ACCEPT
share|improve this answer
    
Thank you Peter, my assumption was that no other rules are in place –  Sergei Sep 22 '11 at 8:38
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.