iptables -t nat -A PREROUTING -d 192.168.1.15/32 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 192.168.2.15:3389 iptables -t nat -A POSTROUTING -s 192.168.2.15/32 -p tcp -m tcp --dport 3389 -j SNAT --to-source 192.168.1.15