iptables allow creation of rules to define packet filtering behavior.

learn more… | top users | synonyms

-1
votes
0answers
5 views

IPTables rules for in/outbout traffic

I'm setting up a flavor of Linux which has a number of ethernet ports being used for different purposes. eth0 (renamed to 'wan') is connected to the internet (T-100) eth1 (renamed to 'lan') is ...
1
vote
0answers
39 views

forward packets from one interface to another interface using iptables

I have an embeded system with 2 interfaces e0 and m0, whose ips are 10.0.0.20 and 192.168.0.20, respectively. Incoming packets into e0 have an ip of 10.0.0.10 and should be forwarded to m0 interface ...
0
votes
0answers
13 views

PPTP Through IPTables

If this has already been answered, I apologize, I could not find an answer to this during my searching. I am new at Linux/Unix and I have recently implemented a Raspberry Pi firewall/gateway on my ...
0
votes
0answers
24 views

iptables - How to remove connection tracking

I'm using this command for redirect all web traffic (http) into my local web server iptables -t nat -I PREROUTING -p tcp --dport 80 -j DNAT --to 192.168.11.100 Then i test, access a website and got ...
-1
votes
0answers
26 views

iptables v1.4.21: Couldn't load match `-d':No such file or directory [on hold]

I am running kernel 3.14.18 and using iptables 1.4.21, built with these options: --static-enable --disable-shared When I run this command: /sbin/iptables -A PREROUTING -m -d 127.3.0.2/24 -j DNAT ...
1
vote
2answers
29 views

iptables - Redirect web traffic to LAN Server

I have a webserver which is running on ip address 192.168.11.100 How can i use iptables to redirect all web traffic (http and https) to my webserver on LAN? After that i want to add except list mac ...
0
votes
1answer
8 views

How can I set up the ULOG target with iptables and MySQL

I'm running CentOS 6.6 32bit as a firewall box using iptables. I want to be able to use the ULOG target to store dropped packets in a MySQL database for statistical analysis. After much Googling I ...
0
votes
1answer
39 views

iptables - Redirect except list MAC Address

I'm using iptables on my router to redirect all web traffic to my page. But i don't know how to except my mac address list. I did command like this: iptables -t nat -A PREROUTING -m mac ! ...
2
votes
0answers
36 views

Routing traffic for specific user to specific interface

I have a Linux box with these interfaces: eth0 Link encap:Ethernet HWaddr 14:da:e9:ef:75:7d inet addr:176.9.85.182 Bcast:176.9.85.191 Mask:255.255.255.224 tun0 Link encap:UNSPEC ...
1
vote
0answers
12 views

redirect all ARP traffic from eth0 to eth1

I would like tredirect ARP traffic. Im struggling with arptables and ebtables but i cant see the light :) I have 2 interfaces : eth0 10.10.10.25 eth1 10.10.10.20 Both in 10.10.10.0/24 I want to ...
0
votes
0answers
20 views

change of iptables rules

I have following entries in the iptables: root@hostname> service iptables status iptables: Firewall is running. Table: filter Chain INPUT (policy DROP) num target prot opt source ...
0
votes
1answer
19 views

how to block my phone from the vps?

My android phone wlan mac is x1:x2:x3:x4:x5:X6 I want to block the phone to logon in the vps. here is the iptable command: iptables -A INPUT -m mac --mac-source x1:x2:x3:x4:x5:X6 -j DROP I found ...
1
vote
0answers
27 views

Why my mac address is not in the iptable log info? [closed]

Here is one of my iptables log info: Feb 8 12:08:44 change kernel: [115096.483275] [UFW BLOCK] IN=eth0 OUT= MAC=a1:a2:a3:a4:a5:a6:4c:96:14:ff:df:f0:08:00 SRC=x1:x2:x3:x4:x5:X6 DST=y1:y2:y3:y4:y5:y6 ...
2
votes
0answers
39 views

restrict IP traffic between VLAN sub-interfaces

I have a router/firewall-PC with two VLAN sub-interfaces eth2.100 and eth2.200: I would like to allow communication between networks 192.168.100.0/24 and 192.168.300.0/24(PC3 network). In addition, ...
0
votes
1answer
40 views

Port Forward :80 and :8080 to Two Different Servers

On a CentOS 6 server with an IP address of 172.16.1.10, how can I configure iptables to route traffic destined for 172.16.1.10:80 to 192.168.1.10:80, and traffic destined for 172.16.1.10:8080 to ...
0
votes
1answer
42 views

Stateful user-space firewall for Linux

Is there any stateful user-space firewall for Linux? I'm looking for a firewall that doesn't rely on anything in Linux kernel (like iptables/netfilter) and works with raw packets.
1
vote
0answers
36 views

Limit transfer speed rate by Iptables Rules

I have D-Link Router DSL-2730U that support busybox OS and iptables version 1.4.0 I managed successfully to block the host for being connect to the internet using the following command block by ip ...
1
vote
1answer
30 views

Java Client Connection Refused by Linux Server

I have a Java server and client, which is a simple server that prints a message when the client communicates with it. It works perfectly fine when the client and server are on the same machine. When I ...
2
votes
0answers
13 views

Dropping packets before mangle POSTROUTING

In iptables on Linux 3.10, why do packets which have been DROPed by the FORWARD chain of the standard table still appear in the POSTROUTING chain of the mangle table? -- I'm trying to use the standard ...
1
vote
0answers
22 views

Shorewall on router keeps blocking apt-get update on virtual guest

I have a dual-IP LXC server with several unprivileged containers configured for three users. Each user has his own bridge: lxcbr0, lxcbr1 and lxcbr2. For efficiency, the host runs apt-cacher-ng. Each ...
1
vote
1answer
41 views

Redirect traffic destined for IP and port

I have a program that wants to connect to 1.2.3.4 on port 5678, but it can't because the port is blocked on our network. However, I do have an SSH tunnel set up that redirects localhost:5678 to ...
2
votes
2answers
37 views

What does this iptables rule mean?

Reading this article on how to configure OpenVPN, I see the following paragraph: Raspbian has a firewall to protect your Raspberry Pi from unknown and unexpected Internet sources. We still want ...
0
votes
2answers
47 views

Forwarding a Localhost:Port to an ExternalIP:NewPort

We have got an application running on our linux server. From that application, when we try and access localhost(127.0.0.1):localport, it should be forwarded to an external IP. Users will only try and ...
1
vote
1answer
26 views

iptables, differentiate ports based on hostname

Is there a way, using iptables, to ACCEPT traffic from HOSTNAME1, HOSTNAME2, HOSTNAME3 to port 22 and FORWARD traffic from everyone else to a different port and make the rule persistent? ...
0
votes
1answer
36 views

How to unmask an IP with iptables?

Is there a way to unmask an IP using iptables? I know to mask all-in-one is following by: iptables -t nat -A -POSTROUTING -j MASQUERADE Thanks in advanced.
1
vote
1answer
38 views

iptables: route packets to example.com via public proxy

I want to access certain websites via a public proxy and I can't seem to get it right using iptables. Let's say I want to access example.com having ip address 1.2.3.4 via a public proxy at ...
2
votes
3answers
89 views

How to make Raspberry Pi to receive an IP from a router and also pass another IP to another device?

I know that I could achieve the desired result with an Ethernet switch, but I'm curious if I can get this with some cheaper solution. The idea is as follows: Rapsberry Pi has two Ethernet ports - ...
2
votes
1answer
77 views

How to use both syn proxy and connlimit rules with iptables?

I want to write both syn proxy and connlimit rules. I want to send packets to syn proxy first because of performance issue. Here is rule sample. I use bridge interfaces but I dont think it is ...
2
votes
0answers
41 views

debugging iptables when tunneling one VPN through another

I seek to tunnel one SSL VPN (F5, running on my debian laptop==client) through another (OpenVPN, running on a debian linode==server), but lose all client networking (including, e.g., ping) after the ...
1
vote
0answers
41 views

iptables / VLAN: interface names

I have just started working with VLANs. My memory was VLAN interface names are the interface name plus dot plus the VLAN ID. And that is what vconfig offers. After some (successful) manual tests I ...
0
votes
1answer
53 views

iptables configuration for Transparent squid proxy

I have to setup a transparent squid proxy server using iptables and squid. Following is the scenario: [INTERNAL NETWORK] -> [Main Switch] -> [Proxy Server] -> [Firewall] -> [EXTERNAL ...
0
votes
1answer
29 views

Using IPTables to block all connections but still be able to backup vServer

my vServer / webserver (OS: Debian squeeze) got hacked and compromised. Therefore I want to use rules in IPTable to block all input and output connections except ssh. Afterwards I want to backup at ...
0
votes
3answers
66 views

Unknown cause for redirect on 80 port

I have an Ubuntu 14.04 server with Apache 2.4.7 running there, hosting one site on 80 port. Today I discovered that every request to 80 port redirects to another website with response: HTTP/1.1 301 ...
0
votes
0answers
56 views

[Solved]No problem connected by filezilla, but cannot get list when connected by linux CLI client

I built FTP server by VSFTPD, on Raspberry pi, and Inside NAT. Surely set port-forwarding and, it perfectly functional when I connected by filezilla. But, I can't execute LIST(dir) when I connected ...
0
votes
0answers
33 views

DNAT forwarding for FTP: No route to host

I have a single public IP for multiple VM, i need forward multiple ports for FTP service, i write these lines: iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 20:21 -j DNAT ...
1
vote
0answers
23 views

netfilter rules to forward all traffic to a local website by default, and making exceptions to that rule by macaddr

This is for raspbian acting as a gateway. computers -> [eth1] raspberry pi (dhcp) [eth0] -> modem/router -> internet I made an ip forwarding rule which redirects all traffic coming from eth1 ...
1
vote
1answer
22 views

Virtulisation IPTables Rules

I haven't been able to find a solution this as of yet. I'm not very experienced in IPTables so any support you can provide will be appreciated. I have a server with a few VMs on there. The main node ...
1
vote
1answer
55 views

Iptables rules for remote mysql server

I have a local mysql database on a centos server which causes a lot of load because there are a lot of queries made towards it. I want it hosted on its own server but i dont want every single ...
1
vote
1answer
50 views

What considerations would I need when configuring iptables?

Synopsis I am looking at learning more about Server Administration. I have been running my own web server for a few years although many things were set-up by my friend and now I wish to learn more ...
3
votes
1answer
42 views

How to combine connlimit with IP sets?

connlimit lets me limit the number of connections per client/service. How would I go about to combine such a rule with the IP sets available in more recent versions of the Linux kernel and netfilter?
0
votes
1answer
41 views

Connection lost to VPS While using iptables by default policy as DROP for INPUT, OUTPUT, FORWARD

I'am using iptables in many server's but now stuck with this issue while using default Policy as DROP. Here is my rules which i have used in VPS, Tried many time's everything seems fine but VPS ...
1
vote
1answer
25 views

How to carry a string over from one chain to another in iptables?

Here's what I'd like to do. In my rule file (which I use with iptables-restore) I have (with limits removed): -4 -A LOGDROP -j LOG --log-prefix "ipt:4:drop " -6 -A LOGDROP -j LOG --log-prefix ...
3
votes
0answers
53 views

iptables: using “conntrack” and “recent” modules to block unsolicited packets

When I only allow RELATED and ESTABLISHED packets, and DROP everything else, my firewall rules work perfectly and I have no problems: ### VARIANT A -A INPUT -i wlan0 -m conntrack --ctstate ...
1
vote
1answer
37 views

Observing ping replies under DNAT

I'm confused while trying to understand the DNAT mechanism under below circumstance. My understanding: DNAT = Destination Network Address Translation: Functionality which translates the destination ...
2
votes
4answers
70 views

How can I lock myself out of a linux box with iptables?

In the Securing Debian Howto I read (about iptables): The tools can easily be misused, causing enormous amounts of grief by completely crippling network access to a system. It is not terribly ...
2
votes
1answer
50 views

How do I apply iptables SNAT to packets bound for localhost (INPUT chain)?

I'm setting up a host that has two routes to the public internet: one via my run-of-the-mill home gateway router, the other via a gateway router on a semi-private network (AMPRNet on 44.0.0.0/8). Most ...
0
votes
1answer
74 views

BIND/DNSMASQ query hanging on ubuntu server 14.04.1

I'm testing out a BIND and DNSMASQ configuration on my VPS. When I run a program which submits a bunch of queries (around 10-20 per second) my DNS replies stop coming back for a random amount of time. ...
0
votes
1answer
31 views

iptables rules for machine running as openvpn server

I set up an older laptop as an OpenVPN server for my home network (and a dwarffortress server, but that's beside the point). This is the first time I've set something like this up - I wanted a secure ...
1
vote
0answers
83 views

Redirecting all non-local traffic from specific ip to external proxy

I currently have a squid proxy running on an external server (outside the LAN, with a public IP). I would like to route all non-local traffic from a specific device through it. That is, any requests ...
1
vote
2answers
70 views

Redirect outcomming traffic to local server

I have a Apache web server set which listens on port 4000 and I want to use this (local) server as a kind of proxy. The idea is to redirect all the local outcomming HTTP traffic (port 80) to my ...