DNAT ñ ïîäìåíîé ïîðòîâ

[Alekc]

Äîáðûé âå÷åð.

Åñòü òàêàÿ ñèòóàöèÿ:
lighttpd ñåðâåð íà ïîðòó 8081 â ðåæèìå https
Ìíå íóæíî ÷òîáû "ñíàðóæè" îí áûë âèäåí íà äåôîëòíîì ïîðòó.

Åñëè ÿ ïåðåâîæó îáû÷íûé http ïîðò (80), òî âñå ðàáîòàåò (post-firewall):
iptables -t nat -I PREROUTING 1 -i $1 -p tcp --dst $2 --dport 80 -j DNAT --to-destination $2:8081
iptables -I INPUT 1 -p tcp --dport 8081 -j ACCEPT
È áðàóçåð çàõîäèò ïðè íàáîðå https://router_ip_address:80/

À åñëè ÿ äåëàþ ïðîáðîñ ïîðòà 443 (https):
iptables -t nat -I PREROUTING 1 -i $1 -p tcp --dst $2 --dport https -j DNAT --to-destination $2:8081
iptables -I INPUT 1 -p tcp --dport 8081 -j ACCEPT
Òî áðàóçåð íå çàõîäèò íè íà https://router_ip_address/, íè íà https://router_ip_address:443/

Êòî-íèáóäü ìîæåò ïîäñêàçàòü ãäå ÿ íàêîñÿ÷èë ?..

[Alekc]

Âîïðîñ çàêðûò - îêàçûâàåòñÿ Êîðáèíà òîæå ôèëüòðóåò ïîðòû...