# input-port destination:port interface
iptables -t nat -I PREROUTING -p tcp -i $3 --dport $1 -j DNAT --to-destination $2
#iptables -A FORWARD -p tcp -i $3 -d $2 --dport $1 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT