iptables allow creation of rules to define packet filtering behavior.

learn more… | top users | synonyms

1
vote
2answers
125 views

Is firewalld the same as iptables?

I tried to close iptables on RHEL 7.2 using chkconfig iptables off error reading information on service iptables: No such file or directory tried /etc/init.d/iptables stop too, got -...
1
vote
3answers
30 views

How to access a URL filtered only for my public IP from outside my network

There is this URL which I can access from inside my network, because they allowed my public IP to access it. All other IPs are denied. how can I configure my iptables so that I can access this ...
3
votes
3answers
65 views

IPtables installation question

I am new to installing iptables and have an excellent book called "Linux Firewalls: Attack Detection and Response" by Michael Rash. I have a few questions before I begin. I want to make an ...
1
vote
1answer
59 views

iptables DNAT: 'No chain/target/match by that name'

I am trying to use DNAT on a new custom Linux target, but I get an error with the following basic command: #iptables -t nat -A PREROUTING -d 10.110.0.250 -p tcp --dport 9090 -j DNAT --to 10.110.0.239:...
1
vote
2answers
26 views

how to remove iptables port mirroring rule

I don't have much knowledge on iptables. I googled the port mirrioring with iptables iptables -t mangle -I PREROUTING -j TEE --gateway 10.20.0.129 iptables -t mangle -I POSTROUTING -j TEE --gateway ...
0
votes
1answer
121 views

Iptable rules for squid on centos 7

I have two interfaces in my proxy server eth0 and eth1. where eth0 connects to local (private) network wile eth1 connects to internet.My squid version is 3.3.8 and centos 7 is my OS. I have to ...
0
votes
0answers
19 views

IPTables/IPRoute + Avoiding VPN

I have a debian jessie headless server running an OpenVPN connection. However there is certain traffic I don't want passing through the VPN, and would rather pass through my local gateway. I have ...
0
votes
0answers
38 views

Unable to access http server when ufw is running, on Raspbian?

I have a Raspberry Pi running Raspbian, with Apache2 for the web server. Some recent change seems to have broken my ability to access my web server, when ufw is running. The server simply doesn't ...
0
votes
1answer
51 views

iptables forward all traffic to 2 different interfaces

I'm currently using dnsmasq to create a small Debian box as a DHCP and DNS cache server. Until today, I had just 2 interfaces (eth0, eth1). One connected to my WAN (eth0) and one connected to my LAN (...
0
votes
2answers
125 views

Packet flow in a virtual bridge with two interfaces, centos 7

I am struggling to create a bridge firewall with iptables since I cannot find/catch packets flowing through a bridge with two interfaces in centos7. No ip addresses are configured on interfaces or the ...
0
votes
0answers
26 views

SQUID proxy not allowing to access internet

I am using centos 7 and I have followed this tutorial to install transparent proxy on my system. Every step has been done successfully but when I try to access internet from any client. Nothing is ...
1
vote
0answers
50 views

Iptables multiple port redirects based on destination address

I have iptables setup for selective routing. In the current configuration it checks if the dst address is listed in a specific chain and if it is not it redirects the traffic to my proxy port which ...
0
votes
1answer
48 views

Block incoming port

I installed LabView on a Scientific Linux 6 machine and promptly got a message from our security officer, stating that the port 3580 is open and listening and that this is a security issue. Apparently,...
0
votes
3answers
60 views

iptables: block all inbound traffic over a certain port number

It is possible using iptables (on Debian) to block all inbound connections for all the ports with a port number over (as an example) 16000. Like this (using 16000 as reference): The port 15999 is ...
0
votes
0answers
35 views

Block incoming traffic in bonding mode when primary interface is down

My server running on latest kernel (4.4.6) has configured a bond device (bond0) with two enslaved interfaces eth0, wlan0 with primary interface eth0. cat /proc/net/bonding/bond0 Ethernet Channel ...
2
votes
1answer
59 views

Shorewall to protect interfaces that are not yet defined

I am planning to use Shorewall to filter traffic that originates from a virtual interface created by OpenVPN (lets call it tap0). If OpenVPN did not successfully create this interface before ...
1
vote
1answer
41 views

Route specific traffic to specific interface

I have two NICs. Basically, I want to use one of them for specific traffic (based on the destination IP or the domain) and the second one for the rest of the trafic. Is this possible? If it is, How ...
1
vote
0answers
33 views

OpenVPN block SMTP Access Server completely

I've tried almost all iptables rules to block smtp on openvpn server but still clients clients can access remote smtp servers on port 25. I'm using openvpn access server. It's creating two interfaces ...
1
vote
1answer
68 views

How do I amend these iptables rules so that they bind HTTP traffic to my VPN connection?

I have followed this guide to set up a VPN service to send the data to/from transmission-daemon from my device running Debian. #!/bin/sh # Print environment variables for transmission's benefit ...
2
votes
1answer
291 views

Don't allow docker internet access

I'm looking for a simple way to limit my docker containers so they only have local access and not internet access. I've tried using IPtables to do this and the following works: iptables -I FORWARD -...
0
votes
1answer
73 views

Dose iptables NAT overwrite user agent of HTTP headers?

If i use iptables to NAT all HTTP traffic behind another network, does it overwrite user agent of HTTP headers? The rules are as follows: /usr/sbin/iptables -t nat -A POSTROUTING -o eth0 -j ...
3
votes
1answer
134 views

PPTP VPN not working with Linux router

ORIGINAL: I've just switched from an old Linux install (Debian squeeze) to a new one (Linux Mint 17.3) for my router (I am using a full desktop PC with a Linux install as my router). The Linux PC ...
1
vote
1answer
43 views

Answer redirect IP to specific port

I want make a system that has a few subdomains. I set each subdomain to IP address using DNS. I used random IP addresses for the question 165.93.198.34 x.mydomain.com (Which is actually 165.93.198....
2
votes
1answer
83 views

Blocking a specific external IP:Port connection in RedHat?

I know that in RedHat, in the IP tables I can block incoming connections to a local port. I can also block connections from a specific IP. But is it possible to block a connection from a specific IP ...
2
votes
0answers
82 views

How to debug what is stopping ping to respond on our server?

We used to have a sysadmin person months ago who had disabled ping response on one of our servers. But now we want to re-enable ping response. I tried to check if the ping was disabled from config. ...
0
votes
1answer
100 views

Redirect https request on local network

I'm trying to implement a local web server that handle all the http requests. Basically, when a user connect to the network and open an url, he is redirected to my local web server. I'm using dns ...
1
vote
1answer
90 views

lxc container <-> external internet, what I missed?

I have Ethernet on my machine (enp0s10) that connected to real network, and I have lxcbr0 Ethernet bridge which gather lxc containers. And I want to make available one of lxc containers. So I wrote: ...
1
vote
0answers
31 views

Why does a connection from my LAN to my public IP address fails?

I have an OpenVPN server on server. It is available from Internet via a two NATs: first the ISP box relays to 192.168.0.10, then 192.168.0.10 relays to 10.10.10.254 (relays = DNAT). I can connect ...
2
votes
1answer
146 views

Redirect secondary network interface traffic along with port forwarding to tun0 (OpenVPN) using iptables

I have a NAS server which I should do port forwarding for it in order to make its services accessible from internet. However my ISP is blocking ports, so I've managed to buy myself a cheap Ubuntu VPS ...
1
vote
1answer
23 views

What order of iptables rules to use for specific SRC IPs?

I would like to block traffic from a specific address during some hours. I use firehol to manage my rules. The following rule does block all traffic during my target hours ACCEPT all -- ...
0
votes
0answers
29 views

Firewall rules: banned localhost

I recently had an issue with a server that was refusing local connections. I was doing some wget domain.com/somePath. And while the resolution was correct and returned the right EXTERNAL_IP, the ...
0
votes
1answer
39 views

iptables REJECT icmp-admin-prohibited

The iptables man page says: Using icmp-admin-prohibited with kernels that do not support it will result in a plain DROP instead of REJECT I have been unsuccessful at finding out at which kernel ...
1
vote
0answers
17 views

OpenVPN maintain connection state during tunnel reconnect

Sometimes I want to do a short maintenance like restarting a tunnel, all connection running on top such as file transfer...etc will receive connection lost signal, is it possible to maintain those ...
0
votes
1answer
64 views

NAT for second interface on private network

I have the following configured for my two network interfaces. eth1 10.93.90.1 (Production Network) eth0 192.160.0.1 (Private Network/Labb Network) I want to configure eth0 with NAT so I can ...
0
votes
0answers
26 views

RHEL Jenkins email notifications failing

RHEL Server release 6.7 (Santiago) I know there have been multiple questions about this on SO (none of which have helped me solve my problem), but I think my problem pertains to Linux more so than it ...
1
vote
0answers
51 views

How to prevent responding to arp scan requests from outside (except the router) in ubuntu?

How do I prevent my computer from responding to arp scans in my network? A solution using iptables or something similar is very welcome. The network interface is wlan0. Some malicious users are ...
4
votes
0answers
20 views

Routing policy is not working

I have an Access Point with OpenWrt. On other host of the same LAN there is a squid (IP Address 192.168.80.148). I'd like to route packages with destination port 80 to 192.168.80.148. So I have root@...
4
votes
1answer
89 views

How to redirect web traffic to specific host with iptables

I want to be able to redirect a host in my Lan to an specific ip address and port. I can achieve one thing which is that only my desired host can access the ip address, but I can't get the user to ...
4
votes
0answers
200 views

iptables and ip forwarding for failover

hi i have an ethernet nic interface with 4 additional virtual interfaces (failovers) all configured with public ip4 (IP-1 to IP-5) / netmask 255.255.255.255 / broadcast addr same as ip: eth0 -...
1
vote
0answers
71 views

Automatically manage whitelisting (e.g. in tinyproxy) of dynamic IPs?

I have a VPS that runs tinyproxy for private use, and another that runs nginx for development. Is there a protocol/daemon that I can use to automate whitelisting for my dynamic IP? So that tinyproxy ...
1
vote
1answer
163 views

How to block broadcast messages (Apple's mDNS traffic)

I am in a network and a user is sending broadcast messages on udp port 5353. Regardless of what that is and what their purpose is, I decided to block all the traffic, so I ran: sudo iptables -A INPUT ...
1
vote
1answer
185 views

What am I doing wrong when trying to open port 8080 on iptables using Ubuntu?

I'm trying to open port 8080 so I can use a web panel application (McMyAdmin) I have installed on my Ubuntu server. I'm rather new to Linux / SSH in general but I'm getting there thanks to various ...
1
vote
1answer
45 views

unmanaged vps centos6.4 need to open port 20/21

I brought an unmanaged vps which is running Centos 6.4 and the only port which was open was 22. I need help opening port 20 and 21 so I can ftp, but every time I try to it won't save and let me login ...
0
votes
2answers
49 views

Count Bytes by Ports

Using RHEL/CentOS 6.7 -- I want to be be able to know byte counts on IPv4 ports. We have thousands.. I would think counting via IP Tables for that would be a bit unweldy and slow the firewall a wee ...
1
vote
1answer
73 views

Iptables rules doesn't work as expected

I need to block access to my server from the outside of my private network. I need to allow pings from my server out only to my private network and answer pings initiated from my private network as ...
1
vote
0answers
40 views

How to not going through openvpn tunnel for a specific port

After long hours of digging and many tries I still cannot figure out how to not have a traffic on a given port going through the openvpn tunnel. Below my setup: (enp0s25)<ovpn server>(tun0) <...
1
vote
0answers
86 views

How to block access to “private” host-only network from VirtualBox nat interface (separate host-only networks)?

Scenario: 1 VirtualBox host with many vms. Different host-only networks are configured for different vm categories: Some vms are "private", others are "standard" vms. Most of these vms, including some ...
2
votes
1answer
44 views

How do you block a port on your loopback?

I am doing some testing and want to be able to test situations where my database goes down. Its running on the same box as my tests, and it appears that things like the following are not doing the ...
0
votes
1answer
66 views

ip tables by route command and iptables's table by iptables command, is the same?

There are two command : route, and iptables. Both of it have a/many tables: route tables and iptables's table. Does those two kind of tables describe the diffrent thing, or iptables can also be ...
0
votes
1answer
37 views

iptables - How to allow all connections to the local lan?

What's the simplest way to express "allow all connections to the local lan" for iptables output? Including connections to 192.*, 172.*, 10.*, etc. Can all of this compressed within a single rule?