Iptables PREROUTING and INPUT - how to "make friends"?

Question

linux

Good evening!
Actually such a question.
How can I configure traffic redirection (PREROUTING) so that it first goes through the "Processing" INPUT checks?
I am currently using this rule:

-A PREROUTING -d 144.76.249.14 -j DNAT --to-destination 10.0.0.34

The EU-but INPUT does not "touch" it, because for obvious reasons, PREROUTING goes before INPUT.
Looking forward to your reply, thanks in advance!

Answer 1

Create a new Filters chain and add to this chain all the rules from the INPUT chain
iptables -N Filters
iptalbes -I Filters -j ACCEPT
Add a redirect rule to the Filters chain to the INPUT chain
iptables -I INPUT -j Filters
Add a packet forwarding rule to the Filters chain to the FORWARD chain
iptables -I FORWARD -j Filters

Answer 2

Excuse me, why not check in the same Prerouting?
The traffic that is intended for the machine goes to Input, so no way.
Here, the logic is that the order and purpose of the traffic cannot be violated.

Answer 3

Create a custom validation chain and redirect to it from the INPUT and FORWARD chains

Answer 4

How can I configure traffic redirection (PREROUTING) so that it first goes through the "Processing" INPUT checks?

In short, no way. Search Google images for "iptables packet flow".
PREROUTING is called so precisely because it is called before the routing decision.
INPUT is called after the routing decision has already passed.
Previously, the NAT table had the ability to filter packets, now it has been removed (IMHO in vain).

Answer 5

And how then can you redirect traffic after passing INPUT`a?