DMZ using iptables

Question

linux

Please advise how to set up DMZ in iptables - forward all ports from the external Internet to a computer on the local network? OS Ubuntu Server 10.04

Answer 1

The DMZ must be separate from the local network.
That is, it must be a separate subnet.
I usually make the following rules for the DMZ.
1) from the Internet to the server in the DMZ, I forward only the necessary ports.

Answer 2

iptables -A PREROUTING -t nat -i $ETH -m state --state NEW -j SNAT --to-destination $
IP And it's not DMZ