iptables -t nat -I PREROUTING 1 -i vmbr0 -d 11.22.33.44/24 -p tcp --dport 53 -j DNAT --to-destination 192.168.23.1/23:53 iptables -A FORWARD -i vmbr0 -o vmbr1 -d 192.168.23.1/23 -p tcp --dport 53 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -i vmbr1 -o vmbr0 -s 192.168.23.1/23 -p tcp --sport 53 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -D PREROUTING -i vmbr0 -d 11.22.33.44/24 -p tcp --dport 53 -j DNAT --to-destination 192.168.23.1/23:53 iptables -D FORWARD -i vmbr0 -o vmbr1 -d 192.168.23.1/23 -p tcp --dport 53 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT iptables -D FORWARD -i vmbr1 -o vmbr0 -s 192.168.23.1/23 -p tcp --sport 53 -m state --state ESTABLISHED,RELATED -j ACCEPT