From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <alt-skeeper@yandex.ru>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on sa.int.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00,SPF_PASS
	autolearn=ham version=3.2.5
X-Yandex-Spam: 1 
X-Yandex-Front: smtp15
X-Yandex-TimeMark: 1222406580
X-MsgDayCount: 2
X-Comment: RFC 2476 MSA function at smtp15.yandex.ru logged sender identity
	as: alt-skeeper
Message-ID: <48DC7114.1090005@yandex.ru>
Date: Fri, 26 Sep 2008 09:20:20 +0400
From: SKeeper <alt-skeeper@yandex.ru>
User-Agent: Thunderbird 2.0.0.6 (X11/20070804)
MIME-Version: 1.0
To: Vitalik Salomatin <chelroot74@mail.ru>,
	ALT Linux Community general discussions <community@lists.altlinux.org>
References: <E1Kj5he-000ODE-00.chelroot74-mail-ru@f53.mail.ru>
In-Reply-To: <E1Kj5he-000ODE-00.chelroot74-mail-ru@f53.mail.ru>
Content-Type: text/plain; charset=KOI8-R; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [Comm] =?koi8-r?b?68HLIM/UzcXOydTYINDSz8LSz9vFzs7ZyiDQz9LUPw==?=
X-BeenThere: community@lists.altlinux.org
X-Mailman-Version: 2.1.10b3
Precedence: list
Reply-To: ALT Linux Community general discussions
	<community@lists.altlinux.org>
List-Id: ALT Linux Community general discussions <community.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/community>
List-Post: <mailto:community@lists.altlinux.org>
List-Help: <mailto:community-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Sep 2008 05:23:10 -0000
Archived-At: <http://lore.altlinux.org/community/48DC7114.1090005@yandex.ru/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

Vitalik Salomatin пишет:
> Допустим я пробросил 80 порт снаружи через сервер на копм внутри 
> сети
> iptables -t nat -A PREROUTING -d 11.11.11.61 -p 
> tcp --destination-port 80 -j DNAT --to-destination 10.0.0.112
>
> А как отменить только это правило? (http)
>
>   
Переписываете все правило, но -A заменяете на -D и удалится только оно

iptables -t nat -D PREROUTING -d 11.11.11.61 -p 
tcp --destination-port 80 -j DNAT --to-destination 10.0.0.112