Editar /etc/network/interfaces
Y agregar lo siguiente:
auto vmbr2
iface vmbr2 inet static
address 192.168.0.254
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s ‘192.168.0.0/24’ -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s ‘192.168.0.0/24’ -o vmbr0 -j MASQUERADE
Levantar la red con: ifup vmbr2
Ahora ya se puede crear una VM con la IP 192.168.0.100 y poniendo como GW la 192.168.0.254
Para redirigir puertos a la VM, agregar al mismo archivo lo siguiente (ejemplo de puertos para Plesk)
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 36479 -j DNAT —to 192.168.0.100:36479
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 36479 -j DNAT —to 192.168.0.100:36479
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 80 -j DNAT —to 192.168.0.100:80
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 80 -j DNAT —to 192.168.0.100:80
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 443 -j DNAT —to 192.168.0.100:443
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 443 -j DNAT —to 192.168.0.100:443
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 8443 -j DNAT —to 192.168.0.100:8443
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 8443 -j DNAT —to 192.168.0.100:8443
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 8880 -j DNAT —to 192.168.0.100:8880
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 8880 -j DNAT —to 192.168.0.100:8880
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 21 -j DNAT —to 192.168.0.100:21
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 21 -j DNAT —to 192.168.0.100:21
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 25 -j DNAT —to 192.168.0.100:25
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 25 -j DNAT —to 192.168.0.100:25
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 465 -j DNAT —to 192.168.0.100:465
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 465 -j DNAT —to 192.168.0.100:465
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 110 -j DNAT —to 192.168.0.100:110
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 110 -j DNAT —to 192.168.0.100:110
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 995 -j DNAT —to 192.168.0.100:995
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 995 -j DNAT —to 192.168.0.100:995
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 143 -j DNAT —to 192.168.0.100:143
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 143 -j DNAT —to 192.168.0.100:143
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 993 -j DNAT —to 192.168.0.100:993
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 993 -j DNAT —to 192.168.0.100:993
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 53 -j DNAT —to 192.168.0.100:53
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 53 -j DNAT —to 192.168.0.100:53
post-up iptables -t nat -A PREROUTING -i vmbr0 -p udp —dport 53 -j DNAT —to 192.168.0.100:53
post-down iptables -t nat -D PREROUTING -i vmbr0 -p udp —dport 53 -j DNAT —to 192.168.0.100:53
post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp —dport 8447 -j DNAT —to 192.168.0.100:8447
post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp —dport 8447 -j DNAT —to 192.168.0.100:8447