iptables allow creation of rules to define packet filtering behavior.

learn more… | top users | synonyms

0
votes
1answer
9 views

FTP passive mode, fails

Hi I am trying to setup iptables to allow FTP. When I connect with FTP, i get the following message in my filezilla. Status: Connected Status: Retrieving directory listing... Command: PWD ...
0
votes
1answer
13 views

to allow certain ips and block all other connections on AMAZON EC2 ubuntu 12.04

How do I allow certain IPs and block all other connection in iptables on AMAZON EC2?
2
votes
2answers
58 views

How can I allow SSH and SMTP only using IPTables?

I've got a raspberry pi set up to send me periodic emails. As it's connected to the internet 24/7, I need IPTables set up properly. I want to allow incoming SSH and allow emails to send out on port ...
0
votes
1answer
25 views

Unable to setup iptables for ftp passive mode [duplicate]

I tried the following rules to allow FTP: # The following two rules allow the inbound FTP connection iptables -A INPUT -p tcp --sport 21 -m state --state ESTABLISHED -j ACCEPT iptables -A OUTPUT -p ...
0
votes
0answers
9 views

Measure data submited to a blocked ip adress in iptables

With: sudo iptables -A INPUT -p all -d $ip -j DROP One can drop all packets submitted to an ip adress (or a range of ip adresses). This method is useful if you want to prevent applications from ...
0
votes
1answer
29 views

How to redirect all HTTP request to a local web server

How to redirect all HTTP request to a local web server, supposing we don't have an internet connections Exemple Web server with @IP 192.168.1.1, running apache Client with @IP 192.168.1.X making a ...
-1
votes
0answers
42 views

Interfaces, IPTables, Connections, Local Connection - Confused :/

I configured my iptables today and ran into some questions i could not resolve yet. So it would be nice, if someone could verify or answer the following to clarify: Each interface can be configured ...
1
vote
1answer
21 views

Linux IPTables - Ignore Range of IPAddresses

I am currently modifying some of my IPtables rules on a public server and have run into a bit of a dilemma. The goal is to do the following: Rate limit the amount of SSH connections that can be made ...
1
vote
0answers
12 views

equivalent of iptables rule in ip6tables

I m newbie in the iptables. I have the following iptables rules in the source code of a project iptables -t mangle -I PREROUTING ! -i br0 -p TCP --dport 45 -j MARK --set-mark 0x1000 iptables -t nat ...
0
votes
1answer
19 views

Route a port through a network interface

I'm using OpenVPN on Ubuntu Server to connect to my VPN. That network interface is tun0. All traffic currently goes through the VPN. I'd like to exclude traffic that goes over a specific port, and ...
1
vote
0answers
35 views

Block all tor traffic from my server

I'm trying to prevent all traffic from Tor exit nodes from hitting my website. I've searched and have attempted a few of the solutions, this is what I've done. I curled the ...
0
votes
2answers
39 views

Routing Configuration sending some traffic over VPN

I have a DD-WRT router with an OpenVPN service configured. I'd like to send only certain source IP's over the vpn connection. I believe my current routing table (as seen with netstat -rn) sends all ...
0
votes
3answers
59 views

How does the iptables work with IPv6?

I would like to set up a firewall on Linux Debian for IPv6. It is important to use iptables for me. I have tried to change the ipv4 folder to ipv6. How can I set up iptables for IPv6?
0
votes
1answer
31 views

Forward traffic coming into dummy interface on to another interface(?)

Can I forward traffic coming into a dummy interface on to another interface? Or is it not a real interface at all even? Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot ...
1
vote
1answer
17 views

Unexpected netstat output in DNAT conditions

So, here I have a basic setup with SOCKS5 proxy listening on, oh, say 8123 I redirect TCP to the proxy via iptables From iptables perspective everything looks peachy, iptables -t nat -v -L shows ...
2
votes
1answer
26 views

package from IP arrives at certain port => open portrange to IP for x seconds

I have been toiling with an issue on iptables: I am trying to make a portrange open to a specific IP for x seconds/minutes as a result of a single packet being sent to a specific port. Not exactly ...
0
votes
1answer
28 views

Change iptables log format

Is it possible to change the log format of iptables ? I want to add the ssh_client in the log. I have already made an iptables rule for outgoing ssh iptables -I OUTPUT -p tcp --dport 22 -j LOG ...
0
votes
0answers
13 views

“VPN connection failed” when ufw is on even if there are no rules in ufw interface

Ubuntu 14.04 After update related with ufw and switching nvidia drivers back and forth, suddenly, I can't establish VPN connection to internet. I've deleted all rules and reseted profile in ufw ui but ...
0
votes
0answers
28 views

ubuntu lts and cgroup support in iptables

I don't understand why Ubuntu community built iptables without cgroup support and what I don't understand if community didn't make it? Maybe Ubuntu use another some way (iptables without cgroup etc)? ...
1
vote
0answers
23 views

How to match properly against an IP set of type 'hash:ip,port'?

My current setup is that I have a server with several IPv4 addresses. Let's ignore the IPv6 part for now, as the symptoms are identical there. In the firewall rules I'd like to match against HTTP ...
0
votes
0answers
47 views

iptables - Ping reply Destination unreachable (Host unreachable) [closed]

I would like to route a VNC Connection from a PC(VNC-Client) over a Raspberry-PI(with 2 Network Interfaces) to a SPS(VNC-Server) VNC Port: >= TCP 5900 PC/VNC-Client(192.168.56.48) VNC Client ⟷ ...
0
votes
1answer
30 views

Access to webapp from a different machine

So i have three virtual machines (virtual box). One is the router/firewall. It's running snort + snortsam . This machines runs a webapp in tomcat From this machine I'm trynig to access the webapp i ...
0
votes
0answers
20 views

“iptables -L” isn't showing a rule I just added

I have issue with iptables it's not listing any newly added IPs. I tried both: iptables -A INPUT -s 188.143.232.15 -j DROP and iptables -I INPUT -s 188.143.232.15 -j DROP and service iptables ...
1
vote
1answer
25 views

Allow ftp out through iptables

I have been having difficulty allowing ftp through iptables. Right now my ftp looks like this. Chain INPUT (policy DROP) target prot opt source destination ACCEPT tcp ...
1
vote
0answers
40 views

Valid iptables Firewall on DD-WRT to access Internet on a Virtual Access Point

Device: Linksys WRT54G v5.1 Firmware: DD-WRT v24-sp2 (07/22/09) micro - build 12548M NEWD Eko I use this router as an AP with 2 SSIDs (Private wl0 + Guest wl0.1) and I connect it to a switch ...
1
vote
1answer
44 views

What is blocking: Firewall and tcpwrapper?

Is it possible to find whether firewall(Iptable) or tcpwrapper is blocking a connection without accessing the remote server? (tcpdump?) Thank you,
1
vote
0answers
117 views

Port forwarding with iptables and PIA VPN for single user

I've gotten a Private Internet Access VPN setup on a Mythbuntu 14.04 machine and I am at wits end trying to get port forwarding working with rTorrent (and ruTorrent). My setup is rTorrent running ...
0
votes
0answers
216 views

Fedora 21 Port Forwarding with firewalld (firewall-cmd); how does it REALLY work? Or, does it?

Fedora's ability to forward ports using the apparently "native" networking software, firewalld, appears to continue to be broken beyond credulity. Please note that it hasn't really worked since at ...
1
vote
0answers
45 views

Linux - iptables - get YouTube streaming bytes usage

How do I get bytes usage using iptables for a particular IP, including YouTube streaming videos? Currently, I am using the following IP tables rules to get data usage by IP address: sudo iptables -I ...
0
votes
2answers
37 views

IPtables errors

I am working on a project. I am trying to write iptables rules to control network traffic. I have written some rules. When I try to apply them to the boxes that I am working on I either get locked ...
1
vote
1answer
31 views

linux nat different rules

eth0 (192.168.1.0/24) --> wan eth2 (192.168.10.0/24) --> lan0 I use these rules to enable NAT on my linux gateway: iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -A FORWARD -i ...
0
votes
0answers
117 views

How can I redirect internet traffic from local to proxy server with ip tables (DEBIAN 6)

So i made topology as shown in figure. Router have 3 interfaces like this: eth0 to internet side (with ip 192.168.1.10/24 gateway 192.168.1.254/24). eth1 to server-PC side (with ip ...
1
vote
0answers
35 views

Route wireless LAN through OpenVPN

I am trying to set up my home server to act as an OpenVPN gateway so I can connect to my VPN from any device without installing special software of them. My server is running Ubuntu 14.04. The host ...
1
vote
0answers
29 views

How to route vpn traffic over hostapd-raspberry pi

I have a raspberry pi running hostapd and I am able to connect my laptop as a wifi client to the raspberry bi wifi router. The problem is with the vpn traffic, I cant connect to my office vpn with ...
1
vote
1answer
16 views

iptables drop policy

Audit my rules I'm ask if I really need of two INPUT policy: iptables -P INPUT ACCEPT iptables -F iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ...
0
votes
0answers
16 views

Why does my PPTP connection work if I DMZ the server behind the router, but it does work if I use port forwarding?

Why does my PPTP connection work if I DMZ the server behind the router, but it does not work if I use port forwarding for the wide area network? Is there another port I need to open/port forward ...
1
vote
0answers
34 views

iptables not getting saved ? centos

I am trying to save the iptables, when I run command #service iptables save it says [ok] but when I again open the iptables the rules get revert to default. Can anyone help me to understand this ...
0
votes
0answers
41 views

How to forward range ports in my linux server?

Is there any tools to do range port forwarding in my CentOS system? Just like any ports from 8000 to 9000 shoud be forwarded another IP's 8000~9000 respectively. I know it's easy to be done in Router ...
0
votes
1answer
41 views

mount times out with iptables --policy OUTPUT DROP

I previously ACCEPTed all output traffic by default. Recently changed the policy to DENY output by default, only opening ports needed for server/application functionality. When I tried to mount a ...
0
votes
0answers
101 views

CentOS as home network router: IPTables Port Forwarding failure

I have currently set up a home server with a CentOS 6.6 installation on it. The server has two NIC interfaces which I'm using it as my router and DHCP server. Here's a diagram showing the network ...
0
votes
1answer
39 views

DDOS defence with iptables

I have server with Debian 6 with a many games servers and sadly, I'm getting ddosed. So, there is my ask for help. I want make solid firewall, where my server will safe.
2
votes
1answer
41 views

On a router, what decides if a packet should be forwarded or directed into the router itself?

I'm trying to learn how packet routing works on a linux-based router (OpenWRT in my case) a bit better for setting up a few projects/just-learning. Referencing the below chart, I'll break this into ...
2
votes
2answers
64 views

Is it possible to have multiple virtual machines with the same (guest) ip on the same host?

What I try to achieve: Multiple virtual machines (virtualbox) on a Debian host which communicate with another server (not with each other or the host). All VMs need to have the same static network ...
1
vote
0answers
35 views

CSF not blocking port when removed from csf.conf

I have removed VNC port 5901 from the csf.conf configuration file and executed a csf -f a csf -x and a csf -e to flush and restart CSF. There is a vncserver running on port 5901 and when doing an ...
1
vote
1answer
43 views

Does NAT allow accessing internal network (or router's local interface) from outisde by default?

I am using older SOHO router wl500gP (it is v1 but I think this is not important) with custom Oleg firmware. My topology looks like this: 192.168.3.3 192.168.3.2 NAT 192.168.2.1 ...
1
vote
1answer
65 views

iptables allow INPUT from a specific url

I'm using DD-WRT, and can telnet into it to add iptable rules. I'm looking for a rule that will allow IN from a specific address (say, mydomain.com) on port 80 that will point to an internal IP (say, ...
1
vote
3answers
69 views

how to automate creating firewall rules?

There is a complex live system - few vlans. In each of them there are linux servers, and on every server there are services. Services connect together - for example service http on host A connect to ...
0
votes
2answers
41 views

output in iptables

I have added the rule to iptables file, however the command does not show it. $ sudo less /etc/sysconfig/iptables Generated by iptables-save v1.4.7 on Fri Oct 24 13:28:48 2014 *filter :INPUT ...
1
vote
1answer
63 views

How to enable ping between machines connected in two interfaces?

I have a linux board with two ethernet interfaces as mentioned below. eth0 connected to another linux machine (ad-hoc) eth0 on board 191.168.1.2 connected to Linux machine 192.168.1.3 eth1 on board ...
0
votes
1answer
31 views

iptables | redirect from local [interface:port] to local [interface:port]

0 down vote favorite I have two interfaces eth0 (192.168.1.95) and eth0:1 (10.0.0.100) i want all packet for 192.168.1.95:9900 (from any 192.168/24) will be redirect/forward to 10.0.0.100:9900 and ...