Exam XK0-005 topic 1 question 4 discussion

The command "iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT –-to-destination 192.0.2.25:3128" will temporarily redirect all HTTP traffic to the new proxy server at IP address 192.0.2.25 and port 3128. The options used in this command are: -t nat: Specifies the table (nat) to be used for this operation -A PREROUTING: Specifies that the rule should be added to the PREROUTING chain, which is used to manipulate incoming packets before they are processed by the routing decision -p tcp: Specifies that the rule should apply to TCP packets --dport 80: Specifies that the rule should apply to incoming packets destined for port 80 (the default HTTP port) -j DNAT: Specifies that the target of the rule should be DNAT (Destination NAT), which rewrites the destination address of a packet --to-destination 192.0.2.25:3128: Specifies the destination address and port to which incoming packets should be redirected Note: After executing this command, the administrator should make sure to save the iptables configuration, so that it will persist after a reboot.

The correct answer is D. iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT –-to-destination 192.0.2.25:3128.

-A --append -D --delete -t --tables nat PREROUTING(for altering packets as soon as they come in)

D is correct. Learn more here https://sourcedaddy.com/networking/running-public-services-private-ip-addresses.html