Licson Lee says to YSITD iptables -t nat -A PREROUTING -p tcp --dport $PORT -j DNAT --to-destination=$DEST:$PORT iptables -t nat -A POSTROUTING -p tcp -d $DEST --dport $PORT -j SNAT --to-source=$ORIGIN