安装 firewalld

sudo apt update
sudo apt install firewalld

启动并启用 firewalld

sudo systemctl enable firewalld
sudo systemctl start firewalld

配置端口转发（将 8080 转发到 192.168.1.100:80）

sudo firewall-cmd --permanent --add-forward-port=port=8080:proto=tcp:toport=80:toaddr=192.168.1.100

或者使用更详细的规则

sudo firewall-cmd --permanent --add-rich-rule='rule family=ipv4 forward-port port=8080 protocol=tcp to-port=80 to-addr=192.168.1.100'

重新加载配置

sudo firewall-cmd --reload

查看当前规则

sudo firewall-cmd --list-all