iptables allow creation of rules to define packet filtering behavior.

learn more… | top users | synonyms

1
vote
1answer
373 views

iptables Port Forwarding — no service with the port

I have setup a network as in the image below: Firewall (FW) running CentOS 6 has two physical interfaces with subinterfaces: eth0:2 — 10.100.1.78/25 eth0:3 — 10.100.1.79/25 eth3 — 192.168.0.21/24 ...
2
votes
1answer
14 views

Make a request through vpn interface

I want to be able to make request through a specific network interface, like this: ping -I eth0.1 google.be ping -I eth0.2 google.be This example works on my multihomed OpenWRT router. I now want ...
2
votes
3answers
1k views

bash: iptables: command not found

How do I fix the iptables: command not found problem that happened to Debian 7.6? batman@gotham:~$ uname -a Linux gotham 3.14-0.bpo.2-amd64 #1 SMP Debian 3.14.13-2~bpo70+1 (2014-07-31) x86_64 ...
2
votes
1answer
12 views

(S/D)NAT over NF hooks

Could someone help on explaining the advantage of iptables NAT over the netfilter hooks. Say suppose, instead of using NAT if we create custom kernel module to bind handler with netfilter for PRE/POST ...
0
votes
2answers
13 views

rc.local and networking start order

If I add iptables-restore to my /etc/rc.local script, will this be guaranteed to be executed before any networking is started by the OS? The alternative is that there will be a brief period where my ...
3
votes
2answers
576 views

Policy routing with load balanced ppp connections

This my setup using Debian 6.0. 6. It's role is a proxy server and a load balancer using eight 3G modems. Whenever a ppp connection dials it takes over the default gateway which is ok but it also ...
5
votes
2answers
5k views

iptables port-mirroring

I need to be able to get a copy of packets received on port 8001 to port 8002. I have tried the following but I get an error that --tee is undefined. sudo iptables -t nat -A PREROUTING -p TCP -s ...
2
votes
3answers
1k views

Iptables GEOIP not working under Debian Squeeze

I've just installed xtables-*, compiled the geoip database, but when I try to use an iptables command it always gives back the following error: Command: iptables -I INPUT -p tcp --dport 80 -m geoip ...
3
votes
0answers
29 views

Is iptables able to filter off UNREPLIED connections?

I am a using dd-wrt router and trying to get some per-user metrics, I was wondering about filtering only ESTABLISHED connections or include NEW and RELATED, I have read a lot about this last two, but ...
0
votes
1answer
32 views

iptables INPUT command

On a machine called ubuntu1, this is the iptables command: sudo iptables -A INPUT -p icmp -j DROP on the other computer (xp1) I can not ping the ubuntu1.So this is OK. But On ubuntu1 can ping xp1. ...
1
vote
2answers
414 views

ping: unknown host with iptables enabled

I can't ping www.google.com. However I can ping the IP address: ping 74.125.237.142 At first, I thought it is a problem with my DNS settings. But I checked my resolv.conf, hosts, and hostname ...
1
vote
1answer
37 views

Minimize game server delay with iptables

I have a debian 7 server hosted by Google Cloud running a game server and a rails server. The rails server run on port 80 and the game server on port 8000. I wanna apply a network rule that allow ...
0
votes
1answer
12 views

iptable rules for proxmox

What follows is a cry for help :D I've just got a powerful dedicated server, and I'd like to virtualize the hell out of it. The idea is to install Proxmox VE on the host and then create a VM for each ...
1
vote
0answers
24 views

record contents of packets dropped in iptables

I'm trying to find a way to record the entire contents of packets (possibly with tcpdump) that have been dropped according to rules in iptables. At present, I have a rule to log these packets (with a ...
1
vote
1answer
18 views

How to configure correctly iptables for run Maples with a blocked internet connection?

I would like to be able to run Maple with a blocked internet connection. For doing so I set my iptables by doing something like this for user joe: sudo iptables -A OUTPUT -m owner --uid-owner joe -j ...
1
vote
0answers
13 views

Initial iptable rule and knockd operation in vps

Today I launched a vps with Debian 7 x64 and started playing around with it. I installed xampp as well as knock daemon to get my hands dirty. So, all I wanted to do was to actually block all requests ...
0
votes
2answers
660 views

Route wlan0 to openVPN tunnel and rest to eth0

I'm having problems to create route/iptables rules for following configuration: I have an openVPN server (tun type) running on my raspberry machine at home At work i have company pc (behind proxy) ...
1
vote
0answers
56 views

Using a VPN client as a VPN gateway

I would like host 1 to use host 2 as a gateway to the remote host 3. I have scoured the web looking for a solution, but it doesn't seem to work for me. VPN client software is ike (shrewSoft VPN) is ...
3
votes
1answer
92 views

Why are these connections not classified as “established” under conntrack?

I have the following rule for iptables: -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT such that outgoing connections not classified as established will be logged. Occasionally, the ...
1
vote
0answers
22 views

I Need Find A Mac Address from a client connected to my Teamspeak

I have a dedicated server and from it I am running a teamspeak 3 server. In teamspeak server there is a client who need to be banned. I have banned him from teamspeak but if you change your windows ...
0
votes
0answers
14 views

Slackware internet gateway with iptables / poor browsing performance

I am running a dual core headless computer as internet gateway via pppoe with two NICs. eth1 (internet interface) no ip, no dhcp eth0 (LAN interface) - 192.168.0.100 static ppp0 - dynamic ip ...
1
vote
0answers
18 views

iptables rules to issue with tftp

My requirement is to add iptables rules in such a to allow tftp traffic(as a client) and drop everything else. And in fact using the iptc library programmatically using C code. To start with I tried ...
1
vote
2answers
27 views

iptables is ignoring rules?

I've found some strange traffic through tcpdump (traffic is ongoing always): 13:00:13.203754 IP 1.2.3.4.1028 > 188.113.188.16.56881: UDP, length 103 13:00:13.204396 IP 1.2.3.4.1028 > ...
11
votes
3answers
26k views

Iptables to allow incoming FTP

i want to allow incoming FTP traffic. CentOS 5.4: This is my /etc/sysconfig/iptables file. # Generated by iptables-save v1.3.5 on Thu Oct 3 21:23:07 2013 *filter :INPUT ACCEPT [0:0] :FORWARD ...
4
votes
2answers
1k views

Port fowarding and load balancer in ubuntu server 12.04

I am looking to create a load balancing server. Essentially here is what I want to do: I have a public IP address, lets say 1.1.1.1 I have a second public IP address, lets say 2.2.2.2. I have a ...
1
vote
0answers
22 views

Set user-wide network proxy settings on Ubuntu (without restart)

Is there any reliable way to set proxy settings user-wide for all traffic on Ubuntu? As far I'm using {http|https|ftp}_proxy variables in /home/$USER/.bashrc which is nice but there's some issues: ...
3
votes
0answers
41 views

Route VPN traffic through different proxies

I want to setup VPN server and route (based on my routing algorithm) all traffic through different proxy servers. Let's say I have one host, with many users, connected to my VPN. I want to route all ...
6
votes
1answer
426 views

Skip routing via `lo` interface for outgoing packets

Introduction I have following load balancing configuration: 10.0.1.31 - lb 10.0.1.35 - virtual IP 10.0.1.32 - node1 (tomcat + mysql) 10.0.1.33 - node2 (tomcat + mysql) I'm using keepalived which ...
0
votes
1answer
36 views

viewing firewalld logs via remote login to CentOS 7 server

I have firewalld installed in a remote CentOS server. When I log into the server over the internet as root, I type the following command to access the firewalld logs: journalctl ...
0
votes
0answers
15 views

iptables and applications

I'm trying to set up a little download box. I currently have pyLoadCore, Transmission-daemon and openvpn all running on raspbian (raspberry pi running headless). My problem arises when I have openvpn ...
1
vote
1answer
22 views

Iptable forward interfaces for gateway machine

I have two Ethernet interface being configured to use as system gateway ex: eth1: 10.10.1.0 eth2: 10.10.2.0 I want to forward all the packets which are coming to the 10.10.2.0 gateway contacting ...
0
votes
0answers
33 views

Network firewall on CentOS, host cannot be resolved?

I have a centos machine and I am trying install some dependencies using yum. When I do this I keep getting a message saying the host cannot be resolved. I was told the previous person that used the ...
0
votes
0answers
19 views

iptables IP address (source and destination IP address) mangling

I tried to understand the concept of iptables mangling part, but somehow failed to understand the IP header manipulative section. For example: Below is the system scenario which I'm trying to ...
0
votes
1answer
454 views

iptables redirect traffic from VPN interface to next interface

Can you help me with this problem please? I need redirect all traffic from tun0 interface (OpenVPN tunnel) to eth1 interface. eth1 is internal network behind this system which works as special ...
3
votes
2answers
878 views

Open and redirect port

I'm trying to set up SNMP for a router so I can monitor it from an existing Nagios installation on an off-site server. I'm having trouble getting the router to respond to SNMP requests from the WAN, ...
1
vote
2answers
89 views

Forward port 22 out a particular interface

The situation I'm in is where we have three separate interfaces on a particular machine. Each connected network only allows servers (by network-based routing/firewalling) to only offer particular ...
1
vote
1answer
56 views

unable to initialize table filter

I have a firewall file saved in /etc/firewall.conf. Everything is ok, I can use it for iptables-restore /etc/firewall.conf with success. So, starting from this file, I created a PHP script(that runs ...
0
votes
1answer
31 views

conntrack in iptables not working [closed]

I have tried to use conntrack in my iptables rules, however I keep getting an error. I've tried aminimal example with just one line and the error appears as well. admin@server:/home/admin/skrypty# ...
2
votes
0answers
31 views

VPN tunnel to two services on two servers?

I've got 2 CentOS 6.5 servers, each running one service: server A: 10.140.54.1/27 running service MySQL port 3306 server B: 10.140.54.2/27 running service httpd port 443 Server B's httpd service ...
1
vote
0answers
150 views

Forward local port to remote port in a Vagrant machine

I have MySQL running on my local machine and I need to publish this port to a Vagrant box without any special SSH hackery. Is there a way for me to forward 10.0.2.2:3306 to 127.0.0.1:3306 on the ...
0
votes
0answers
36 views

how to route traffic on port to ip:port on linux?

I'm trying to route all traffic on port udp 5000 to udp 192.168.0.1:12333 with the following command: $ iptables -t nat -A PREROUTING -p udp -m udp --dport 5000 \ -j DNAT --to 192.168.0.1:12333 ...
5
votes
1answer
375 views

Using source routing (LSRR) - any ideas?

What I want to do is conceptually very simple, but I can't find any information or help about how to go about doing this. Basically, I want to configure my networking to use source routing (LSRR). ...
1
vote
3answers
22 views

Why did this iptables rule block my webserver?

I was setting up Mathematica on a remote server, and needed access to the UI. I set up VNC according to http://wiki.centos.org/HowTos/VNC-Server , and got it working, which involved making an ...
1
vote
0answers
25 views

iptables: can't open tcp port

I'm running a Raspberry PI B+: Linux pi 3.12.28+ #709 PREEMPT Mon Sep 8 15:28:00 BST 2014 armv6l GNU/Linux The Raspberry is connect via lan (dhcp. ip: 192.168.78.29) to the local network. I'm trying ...
1
vote
0answers
28 views

Transparent proxy to other IP of thousand ports

I was bought a service that only allow a IP, the IP that i say, only one, but I need use this from more IP's. I think that I can install in this computer a system to do a transparent proxy for ...
2
votes
3answers
107 views

Bridge/Router with custom logic

I've a Linux box with 3 network adapaters, which I'd like to configure as follow: Adapter A is connected to computer A Adapter B is connected to computer B Adapter C is connected to the Internet. ...
6
votes
1answer
712 views

Why are packages being rejected even through there's a rule that accepts them all before hand?

I'm just reading up on iptables, finally. I'm a little confused because the input chain from the filter table (as installed, fedora 17), looks like this: target prot opt source ...
0
votes
1answer
68 views

iptables NAT on Debian openvz

So i want to create a nat rule for an openVPN server. After getting trouble with the TAP/TUN Devices, it's finally working i think. Now i have to make a nat rule like so : >iptables -t nat -A ...
4
votes
1answer
2k views

IPTABLES is slow after adding '-A INPUT -j DROP' to rule list

I am just getting started with iptables and stumbled across something I don't really understand. FYI, I followed the instructions of Ubuntu wiki's IptablesHowTo. The nat and mangle tables are empty, ...
0
votes
0answers
31 views

Port randomly closing (iptables)

I'm running CentOS 6.5 on a VPS and one of the services I have running is murmur/mumble (A voip application). The issue I'm having is that the port clients connect on will be open when I initially ...