Can the Windows Firewall forward a request for one port number to hit a service listening on a different port?

Question

Can you set the Windows Firewall to modify an incoming port number?

For example, say I have a web server that listens on ports 80 and 443. I also have two different versions of a program... one that makes requests on the regular 80 and 443 ports, and an older version that makes requests on the non-standard 7080 and 7443 ports. I need to support both versions of the program from the same installed web server.

I would like to have a firewall rule in Windows to forward incoming traffic on port 7080 and 7443 to ports 80 and 443. Other firewalls can do this, but it doesn't seem possible from the interface. I'm hoping I can write more complex rules directly to whatever store Windows is using, or that I missed something simple in the normal user interface.

For the sake of academics, I'm interested if this is possible for any version of Windows (both client and server editions) running at least Windows 7. Let's also pretend that putting a simple firewall appliance in front the server is not possible (or at least highly undesirable) in this case.

Answer 1

I'm not aware of any GUI application allow you to configure it.

If you don't mind using command line to set it, see if "netsh interface portproxy add" works for you.

To use it, run "netsh" over elevated command prompt, type "interface portproxy" to switch the context and then "add ?" or "add v4tov4 ?" to show the syntax needed.

Note that it requires the network card have IPv6 enabled in order to work.