echo 1 > /proc/sys/net/ipv4/ip_forward
/sbin/iptables -t nat -A POSTROUTING -o 外网 -s 10.10.10.0/24 -j MASQUERADE
/sbin/iptables -A FORWARD -i 外网 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A FORWARD -s 10.10.10.0/24 -j ACCEPT
iptables -t nat -A PREROUTING -d 61.123.192.179 -p tcp -m tcp --dport 10861 -j DNAT --to-destination 10.10.10.211:3389
iptables -t nat -A PREROUTING -d 61.123.192.179 -p tcp -m tcp --dport 10861:10865 -j DNAT --to-destination 10.10.10.211

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE