iptables allow creation of rules to define packet filtering behavior.

learn more… | top users | synonyms

0
votes
0answers
5 views

Multiple iptables denied in report from hourly logcheck on Debian

I get thousands of lines of iptables denied every hour from logcheck, for a week now. What are the steps to troubleshoot this, what are the main causes of this? This is inside an LAN and the ...
1
vote
1answer
18 views

Why do iptables drop / log even if the appropriate packet should be accepted?

I'm setting up a server running Debian Jessie with some applications like iptables firewall, fail2ban, openvpn, apache, ... The iptables firewall is configured in the way, that it logs every packet ...
2
votes
0answers
28 views
+50

Iptables can't forward from/to internal LAN with proxmox

I have an host with proxmox with single public ip and some virtual machine installed whit webservers and multiple doimains, the first VM is a proxy with haproxy that forward the request to other VM ...
0
votes
0answers
16 views

OpenVPN Server only Serves traffic from Google.com to Client

So I am pretty sure this is a routing/config problem. Whenever my client (Android OpenVPN) connects to the OpenVPN server it can only retrieve traffic from google.com searches. Whenever I try and ...
0
votes
0answers
7 views

DHCP occasionally assigning IP address with hostapd

I am currently getting my internet from a building of mine two blocks from where I live. I usually use a wireless card to connect to the access point that has the internet..What I am trying to do is ...
1
vote
0answers
26 views

iptables: No chain/target/match by that name

I'm trying to configure iptables to get Redsocks working {purpose is to get system wide socks proxy} #!/bin/bash # Create new chain iptables -t nat -N REDSOCKS iptables -t nat -A REDSOCKS -d ...
0
votes
1answer
24 views

IPTables Firewall/Router/Gateway needing to block outbound traffic from users

I have multiple ethX interfaces. eth0 is connected to the internet. eth1 is connected to a trusted network. eth2 is connected to a network I need to impose usage rules. What I'd like to do is ...
1
vote
1answer
49 views

forward packets from one interface to another interface using iptables

I have an embeded system with 2 interfaces e0 and m0, whose ips are 10.0.0.20 and 192.168.0.20, respectively. Incoming packets into e0 have an ip of 10.0.0.10 and should be forwarded to m0 interface ...
0
votes
0answers
14 views

PPTP Through IPTables

If this has already been answered, I apologize, I could not find an answer to this during my searching. I am new at Linux/Unix and I have recently implemented a Raspberry Pi firewall/gateway on my ...
1
vote
1answer
419 views

iptables Port Forwarding — no service with the port

I have setup a network as in the image below: Firewall (FW) running CentOS 6 has two physical interfaces with subinterfaces: eth0:2 — 10.100.1.78/25 eth0:3 — 10.100.1.79/25 eth3 — 192.168.0.21/24 ...
0
votes
0answers
26 views

iptables - How to remove connection tracking

I'm using this command for redirect all web traffic (http) into my local web server iptables -t nat -I PREROUTING -p tcp --dport 80 -j DNAT --to 192.168.11.100 Then i test, access a website and got ...
-1
votes
0answers
29 views

iptables v1.4.21: Couldn't load match `-d':No such file or directory [closed]

I am running kernel 3.14.18 and using iptables 1.4.21, built with these options: --static-enable --disable-shared When I run this command: /sbin/iptables -A PREROUTING -m -d 127.3.0.2/24 -j DNAT ...
1
vote
2answers
30 views

iptables - Redirect web traffic to LAN Server

I have a webserver which is running on ip address 192.168.11.100 How can i use iptables to redirect all web traffic (http and https) to my webserver on LAN? After that i want to add except list mac ...
2
votes
1answer
81 views

How to use both syn proxy and connlimit rules with iptables?

I want to write both syn proxy and connlimit rules. I want to send packets to syn proxy first because of performance issue. Here is rule sample. I use bridge interfaces but I dont think it is ...
3
votes
2answers
594 views

Policy routing with load balanced ppp connections

This my setup using Debian 6.0. 6. It's role is a proxy server and a load balancer using eight 3G modems. Whenever a ppp connection dials it takes over the default gateway which is ok but it also ...
0
votes
0answers
56 views

[Solved]No problem connected by filezilla, but cannot get list when connected by linux CLI client

I built FTP server by VSFTPD, on Raspberry pi, and Inside NAT. Surely set port-forwarding and, it perfectly functional when I connected by filezilla. But, I can't execute LIST(dir) when I connected ...
6
votes
6answers
15k views

iptables to block https websites

I wish to block a few websites that also run upon https, like facebook, twitter, and gmail, in my organization. Squid is not supposed to be used here as per the orders from higher management. We can ...
0
votes
2answers
765 views

Route wlan0 to openVPN tunnel and rest to eth0

I'm having problems to create route/iptables rules for following configuration: I have an openVPN server (tun type) running on my raspberry machine at home At work i have company pc (behind proxy) ...
0
votes
1answer
11 views

How can I set up the ULOG target with iptables and MySQL

I'm running CentOS 6.6 32bit as a firewall box using iptables. I want to be able to use the ULOG target to store dropped packets in a MySQL database for statistical analysis. After much Googling I ...
5
votes
3answers
3k views

Transform a UDP unicast packet into a broadcast?

We need to wake-up some computers on our internal LAN, from the Internet. We have a somewhat closed router, with very few ways to configure it. I'd like to use netfilter (iptables) to do this because ...
2
votes
3answers
2k views

Iptables GEOIP not working under Debian Squeeze

I've just installed xtables-*, compiled the geoip database, but when I try to use an iptables command it always gives back the following error: Command: iptables -I INPUT -p tcp --dport 80 -m geoip ...
0
votes
1answer
40 views

iptables - Redirect except list MAC Address

I'm using iptables on my router to redirect all web traffic to my page. But i don't know how to except my mac address list. I did command like this: iptables -t nat -A PREROUTING -m mac ! ...
2
votes
2answers
597 views

List iptables rules as append command

A while back I was watching over the shoulder of a Linux guru and he issued a command that listed all the iptables rules in the format of the append commands you would need to issue in order to build ...
2
votes
0answers
39 views

Routing traffic for specific user to specific interface

I have a Linux box with these interfaces: eth0 Link encap:Ethernet HWaddr 14:da:e9:ef:75:7d inet addr:176.9.85.182 Bcast:176.9.85.191 Mask:255.255.255.224 tun0 Link encap:UNSPEC ...
1
vote
0answers
12 views

redirect all ARP traffic from eth0 to eth1

I would like tredirect ARP traffic. Im struggling with arptables and ebtables but i cant see the light :) I have 2 interfaces : eth0 10.10.10.25 eth1 10.10.10.20 Both in 10.10.10.0/24 I want to ...
0
votes
1answer
86 views

how to make firewall changes permanent via firewall-cmd?

I am trying to open some ports in CentOS 7. I am able to open a port with the following command: firewall-cmd --direct --add-rule ipv4 filter IN_public_allow 0 -m tcp -p tcp --dport 7199 -j ACCEPT ...
4
votes
2answers
2k views

Whitelist IP's in CentOS 7

I want to setup CentOS 7 firewall such that, all the incoming requests will be blocked except from the originating IP's that I whitelist. And for the Whitelist IP's all the ports should be accessible. ...
1
vote
1answer
6k views

iptables forward all traffic to interface

I have two interfaces eth1 and eth0. I want all traffic on eth0to be forwarded to eth1. I created an iptable rule like this: iptables -A FORWARD -s 0/0 -i eth0 -p tcp -o eth1 -j ACCEPT But this ...
2
votes
3answers
89 views

How to make Raspberry Pi to receive an IP from a router and also pass another IP to another device?

I know that I could achieve the desired result with an Ethernet switch, but I'm curious if I can get this with some cheaper solution. The idea is as follows: Rapsberry Pi has two Ethernet ports - ...
1
vote
2answers
842 views

ping: unknown host with iptables enabled

I can't ping www.google.com. However I can ping the IP address: ping 74.125.237.142 At first, I thought it is a problem with my DNS settings. But I checked my resolv.conf, hosts, and hostname ...
3
votes
2answers
969 views

Open and redirect port

I'm trying to set up SNMP for a router so I can monitor it from an existing Nagios installation on an off-site server. I'm having trouble getting the router to respond to SNMP requests from the WAN, ...
1
vote
1answer
410 views

port forwarding to internal lan server

I've ppp0 --> eth1 and eth0 (internal lan). I need forwarding externel 10022 port to port 8999 of the server 192.168.1.254 iptables -t nat -A PREROUTING -p tcp -i ppp0 --dport 10022 -j DNAT --to ...
1
vote
1answer
520 views

DROP all for port 22 if not geoip set of US for iptables and xtables

I want to simply block all ssh access from anywhere but with in the US. This is my whole iptables, and I have followed ...
0
votes
1answer
45 views

Port Forward :80 and :8080 to Two Different Servers

On a CentOS 6 server with an IP address of 172.16.1.10, how can I configure iptables to route traffic destined for 172.16.1.10:80 to 192.168.1.10:80, and traffic destined for 172.16.1.10:8080 to ...
0
votes
0answers
20 views

change of iptables rules

I have following entries in the iptables: root@hostname> service iptables status iptables: Firewall is running. Table: filter Chain INPUT (policy DROP) num target prot opt source ...
0
votes
1answer
19 views

how to block my phone from the vps?

My android phone wlan mac is x1:x2:x3:x4:x5:X6 I want to block the phone to logon in the vps. here is the iptable command: iptables -A INPUT -m mac --mac-source x1:x2:x3:x4:x5:X6 -j DROP I found ...
1
vote
0answers
28 views

Why my mac address is not in the iptable log info? [closed]

Here is one of my iptables log info: Feb 8 12:08:44 change kernel: [115096.483275] [UFW BLOCK] IN=eth0 OUT= MAC=a1:a2:a3:a4:a5:a6:4c:96:14:ff:df:f0:08:00 SRC=x1:x2:x3:x4:x5:X6 DST=y1:y2:y3:y4:y5:y6 ...
2
votes
0answers
41 views

restrict IP traffic between VLAN sub-interfaces

I have a router/firewall-PC with two VLAN sub-interfaces eth2.100 and eth2.200: I would like to allow communication between networks 192.168.100.0/24 and 192.168.300.0/24(PC3 network). In addition, ...
4
votes
2answers
1k views

Port fowarding and load balancer in ubuntu server 12.04

I am looking to create a load balancing server. Essentially here is what I want to do: I have a public IP address, lets say 1.1.1.1 I have a second public IP address, lets say 2.2.2.2. I have a ...
0
votes
1answer
42 views

Stateful user-space firewall for Linux

Is there any stateful user-space firewall for Linux? I'm looking for a firewall that doesn't rely on anything in Linux kernel (like iptables/netfilter) and works with raw packets.
1
vote
3answers
3k views

How to change user agent on all http requests made from my machine with Squid intercepting proxy?

I'd like to change the user agent on all HTTP requests made from this machine. It's easy enough to change the user agent in each browser, but other apps also make http requests. It's vital I catch ...
1
vote
0answers
38 views

Limit transfer speed rate by Iptables Rules

I have D-Link Router DSL-2730U that support busybox OS and iptables version 1.4.0 I managed successfully to block the host for being connect to the internet using the following command block by ip ...
6
votes
1answer
79 views

Setting traffic class on return packets

I have a network topology: Server <-> router1 <-> router2 <-> router3 <-> edgeRouter <-> "internet" All routers are linux based, and support iptables. The server sets ...
1
vote
1answer
30 views

Java Client Connection Refused by Linux Server

I have a Java server and client, which is a simple server that prints a message when the client communicates with it. It works perfectly fine when the client and server are on the same machine. When I ...
0
votes
1answer
722 views

iptables redirect traffic from VPN interface to next interface

Can you help me with this problem please? I need redirect all traffic from tun0 interface (OpenVPN tunnel) to eth1 interface. eth1 is internal network behind this system which works as special ...
1
vote
0answers
25 views

Shorewall on router keeps blocking apt-get update on virtual guest

I have a dual-IP LXC server with several unprivileged containers configured for three users. Each user has his own bridge: lxcbr0, lxcbr1 and lxcbr2. For efficiency, the host runs apt-cacher-ng. Each ...
2
votes
0answers
14 views

Dropping packets before mangle POSTROUTING

In iptables on Linux 3.10, why do packets which have been DROPed by the FORWARD chain of the standard table still appear in the POSTROUTING chain of the mangle table? -- I'm trying to use the standard ...
0
votes
2answers
48 views

Forwarding a Localhost:Port to an ExternalIP:NewPort

We have got an application running on our linux server. From that application, when we try and access localhost(127.0.0.1):localport, it should be forwarded to an external IP. Users will only try and ...
5
votes
2answers
11k views

How can I configure syslog.conf file, to log iptables messages in a separate file?

How can I configure /etc/syslog.conf file in order to save log information about iptables in a specific file. I want to save these information separately, so I can extract what I want easily and ...
1
vote
1answer
47 views

Redirect traffic destined for IP and port

I have a program that wants to connect to 1.2.3.4 on port 5678, but it can't because the port is blocked on our network. However, I do have an SSH tunnel set up that redirects localhost:5678 to ...