[4:240] -A zone_hotspot_prerouting -p tcp -m tcp --dport 8080 -m comment --comment "!fw3: test" -j DNAT --to-destination 10.0.0.101:8080
[0:0] -A zone_vpn_prerouting -p tcp -m tcp --dport 8080 -m comment --comment "!fw3: test" -j DNAT --to-destination 10.0.0.101:8080
I have hits, I am unsure if I can figure out zone more concrete defenitions for tun0 but from earlier I would asume its hotspot.
tcp dump output if I browse to 10.0.0.101:8080
root@Teltonika-RUT955:~# iptables-save -c | grep 8080
[4:240] -A zone_hotspot_prerouting -p tcp -m tcp --dport 8080 -m comment --comment "!fw3: test" -j DNAT --to-destination 10.0.0.101:8080
[0:0] -A zone_vpn_prerouting -p tcp -m tcp --dport 8080 -m comment --comment "!fw3: test" -j DNAT --to-destination 10.0.0.101:8080
root@Teltonika-RUT955:~# tcpdump -i tun0 -vn tcp port 8080
tcpdump: listening on tun0, link-type RAW (Raw IP), capture size 262144 bytes
13:11:19.977136 IP (tos 0x0, ttl 63, id 8217, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56442 > 10.8.0.4.8080: Flags [S], cksum 0xac71 (correct), seq 2147372348, win 64240, options [mss 1358,sackOK,TS val 1095139937 ecr 0,nop,wscale 7], length 0
13:11:19.977573 IP (tos 0x0, ttl 63, id 58879, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56444 > 10.8.0.4.8080: Flags [S], cksum 0x2061 (correct), seq 3055788837, win 64240, options [mss 1358,sackOK,TS val 1095139937 ecr 0,nop,wscale 7], length 0
13:11:20.226533 IP (tos 0x0, ttl 63, id 62674, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56448 > 10.8.0.4.8080: Flags [S], cksum 0xa2da (correct), seq 763209812, win 64240, options [mss 1358,sackOK,TS val 1095140187 ecr 0,nop,wscale 7], length 0
13:11:20.983906 IP (tos 0x0, ttl 63, id 58880, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56444 > 10.8.0.4.8080: Flags [S], cksum 0x1c73 (correct), seq 3055788837, win 64240, options [mss 1358,sackOK,TS val 1095140943 ecr 0,nop,wscale 7], length 0
13:11:20.984268 IP (tos 0x0, ttl 63, id 8218, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56442 > 10.8.0.4.8080: Flags [S], cksum 0xa883 (correct), seq 2147372348, win 64240, options [mss 1358,sackOK,TS val 1095140943 ecr 0,nop,wscale 7], length 0
13:11:21.238755 IP (tos 0x0, ttl 63, id 62675, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56448 > 10.8.0.4.8080: Flags [S], cksum 0x9ee6 (correct), seq 763209812, win 64240, options [mss 1358,sackOK,TS val 1095141199 ecr 0,nop,wscale 7], length 0
13:11:23.000547 IP (tos 0x0, ttl 63, id 8219, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56442 > 10.8.0.4.8080: Flags [S], cksum 0xa0a3 (correct), seq 2147372348, win 64240, options [mss 1358,sackOK,TS val 1095142959 ecr 0,nop,wscale 7], length 0
13:11:23.000888 IP (tos 0x0, ttl 63, id 58881, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56444 > 10.8.0.4.8080: Flags [S], cksum 0x1493 (correct), seq 3055788837, win 64240, options [mss 1358,sackOK,TS val 1095142959 ecr 0,nop,wscale 7], length 0
13:11:23.258963 IP (tos 0x0, ttl 63, id 62676, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56448 > 10.8.0.4.8080: Flags [S], cksum 0x9702 (correct), seq 763209812, win 64240, options [mss 1358,sackOK,TS val 1095143219 ecr 0,nop,wscale 7], length 0
13:11:27.031105 IP (tos 0x0, ttl 63, id 58882, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56444 > 10.8.0.4.8080: Flags [S], cksum 0x04d3 (correct), seq 3055788837, win 64240, options [mss 1358,sackOK,TS val 1095146991 ecr 0,nop,wscale 7], length 0
13:11:27.031436 IP (tos 0x0, ttl 63, id 8220, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56442 > 10.8.0.4.8080: Flags [S], cksum 0x90e3 (correct), seq 2147372348, win 64240, options [mss 1358,sackOK,TS val 1095146991 ecr 0,nop,wscale 7], length 0
13:11:27.286481 IP (tos 0x0, ttl 63, id 62677, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56448 > 10.8.0.4.8080: Flags [S], cksum 0x8746 (correct), seq 763209812, win 64240, options [mss 1358,sackOK,TS val 1095147247 ecr 0,nop,wscale 7], length 0
13:11:35.222994 IP (tos 0x0, ttl 63, id 8221, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56442 > 10.8.0.4.8080: Flags [S], cksum 0x70e3 (correct), seq 2147372348, win 64240, options [mss 1358,sackOK,TS val 1095155183 ecr 0,nop,wscale 7], length 0
13:11:35.224431 IP (tos 0x0, ttl 63, id 58883, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56444 > 10.8.0.4.8080: Flags [S], cksum 0xe4d2 (correct), seq 3055788837, win 64240, options [mss 1358,sackOK,TS val 1095155183 ecr 0,nop,wscale 7], length 0
13:11:35.478692 IP (tos 0x0, ttl 63, id 62678, offset 0, flags [DF], proto TCP (6), length 60)
10.8.0.3.56448 > 10.8.0.4.8080: Flags [S], cksum 0x6746 (correct), seq 763209812, win 64240, options [mss 1358,sackOK,TS val 1095155439 ecr 0,nop,wscale 7], length 0