go-dnat: A Go repository from go-bai

DNAT管理工具

一键安装

apt install jq curl -y
bash <(curl -Ls https://raw.githubusercontent.com/go-bai/go-dnat/master/install.sh)

root@dev:~# dnat help
NAME:
   dnat - a DNAT management tool

USAGE:
   dnat [global options] command [command options] [arguments...]

COMMANDS:
   append      append a rule to the end of nat chain if it does not exist
   delete      delete a rule by id
   get         get one rule by id
   list, ls    list all rules
   masquerade  append or delete masquerade rule
   sync        sync rules to local machine
   version, v  print version
   help, h     Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --help, -h  show help

添加一个DNAT规则

dnat append -i eth0 -p 8888 -d 10.0.0.1:9999 -m "this is a rule"

查看所有DNAT规则

root@dev:~# dnat ls


ID  Iface  Port  Dest           Comment         CreatedAt
1   eth0   8888  10.0.0.1:9999  this is a rule  2023-07-25T12:21:51+08:00

查看在iptables中创建了什么

root@dev:~# iptables -t nat -nvL
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            tcp dpt:8888 /* go-dnat */ to:10.0.0.1:9999
    0     0 DNAT       udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            udp dpt:8888 /* go-dnat */ to:10.0.0.1:9999

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

删除一个DNAT规则

root@dev:~# dnat delete -id 1

开启 masquerade

root@dev:~# dnat masquerade -A -o eth0

关闭 masquerade

root@dev:~# dnat masquerade -D -o eth0