iptables -I FORWARD -i tun11 -p udp -d 192.168.1.99 --match multiport --dports 57893,57895 -j ACCEPT iptables -I FORWARD -i tun11 -p tcp -d 192.168.1.99 --match multiport --dports 57893,57895 -j ACCEPT iptables -t nat -I PREROUTING -i tun11 -p tcp --match multiport --dports 57893,57895 -j DNAT --to-destination 192.168.1.99 iptables -t nat -I PREROUTING -i tun11 -p udp --match multiport --dports 57893,57895 -j DNAT --to-destination 192.168.1.99