# Create new chain iptables -t nat -X REDSOCKS iptables -t nat -N REDSOCKS # Ignore LANs and some other reserved addresses. iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN iptables -t nat -A REDSOCKS -d 10.10.1.0/22 -j RETURN iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN iptables -t nat -A REDSOCKS -d 224.0.0.0/4 -j RETURN iptables -t nat -A REDSOCKS -d 240.0.0.0/4 -j RETURN #iptables -t nat -A REDSOCKS -d 122.248.x.x/31 -j RETURN iptables -t nat -A REDSOCKS -j LOG -p tcp --syn --log-level info --log-prefix "rs " # Anything else should be redirected to port 12345 #iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 12345 iptables -t nat -A REDSOCKS -p tcp -j DNAT --to-destination 127.0.0.1:12345 iptables -t nat -A REDSOCKS -j LOG -p tcp --syn --log-level info --log-prefix "err " # Any tcp connection made by `darkk' should be redirected. iptables -t nat -I OUTPUT 1 -p tcp -j REDSOCKS iptables -t nat -I PREROUTING 1 -p tcp -s 192.168.1.0/22 -j REDSOCKS