How to make a port forward in Mac OS X

Question

I'd like to make all incoming connections to port 1000 of my host (IP: 200.234.XXX.XXX) to be forward to the port 80 on host 10.211.55.5

How can I do it on my host? It is running Mac OS X 10.5.8

Answer 1

Assuming you have a UPnP router, its easy to configure ports by using PortMap

It has a very simple UI.

Answer 2

Well, I can tell you how I do that sort of thing on my Mac OS X 10.5.8 system.

I started on an answer about NAT, but I think you actually want a TCP forwarder program instead (you mention 'proxy' and port forwarding.)

There's a few ways of doing this, depending upon your needs even 'SSH' can be pressed into action, though my favourite short and sweet way is a Perl script tcpforward.

If you need some HTTP manipulation (you might need to tweak HTTP redirects, so that when a request comes for a URL without a trailing '/' you don't get redirected to the real, inaccessible, server), then Apache can do the job of a reverse proxy. You'll want to look at mod_proxy and specifically ProxyPass and ProxyPassReverse. Do not enable ProxyRequests, that's for forward proxying. It should be possible to use Mac OS's own Apache to do this, if you've got it running. It does come with mod_proxy and /etc/httpd/httpd.conf is the config file to update.

Even with Apache, you need to make sure that all the links in the real server's content are relative, if they reference the real server then you could try the mod_proxy_html module (I have no experience of how well that works.)

Answer 3

Here is a good article: http://www.cyberhq.nl/2005/06/30/port-forwarding-in-macos-x.html

But since you are forwarding to 80 I'm assuming you want it to go to a web server so I would just change the web server config to set up a reverse proxy or something like that.

Answer 4

Quite simple to do, Firstly you will need to enable the remote login service on your mac. This starts your ssh server.

Then run the following command in your OS X Terminal:

ssh -L 200.234.XXX.XXX:10000:10.211.55.5:80 -N 127.0.0.1

You may need to accept the server fingerprint initially as well as type in your local password for ssh login. (You can also set up a local to local ssh public / private key to make it not prompt for a password, but that it a different exercise.)

The format is thus basically:

ssh -L [<local addr>:]<local port>:<remote addr>:<remote port> -N 127.0.0.1

Answer 5

Is your machine connected directly to the internet (IE - without a router)? Normally you do the port forwarding on the router, but if you do use a modem to connect directly, iptables is probably the best way.