iptables forward / proxy - ec2

iptables.sh

#!/bin/sh

# This script must be added in the "User Data" field of the ec2 instance configuration

service iptables start

iptables -F
iptables -t nat -F
iptables -t mangle -F

echo 1 > /proc/sys/net/ipv4/ip_forward

ip=$(getent hosts my-domain.name | awk '{ print $1 }')
iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 3306 -j DNAT --to ${ip}:3306
iptables -A FORWARD -p tcp -i eth0 --dport 3306 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE