2
votes
1answer
14 views

IPSet with IP6Tables ERROR

Can someone please solve my headache and tell me how to fix this? [root@www xtables]# ip6tables -I INPUT -m set --match-set blacklist6 src -J DROP ip6tables v1.4.7: Couldn't load match ...
0
votes
1answer
9 views

Restricted logins + almost all ports closed : secure?

Context : I plan to travel. I want to make a little cloud with my personal server. I wish I could d/l some of my files and eventually upload some files which will not be executed and the whole is ...
0
votes
1answer
26 views

Redirect ports with iptables

I need to do redirect port 443 on all interfaces to 8080 on one interface using iptables on a box with 2 NICs. I also need to block pretty much anything else on those interfaces. Here is my iptables ...
0
votes
0answers
4 views

How to configure sSMTP with CSF?

I have a fresh installation of Debian and I just installed Config Server Firewall (CSF) and sSMTP (with Gmail as SMTP server). Does anyone know how can I tell CSF to use sSMTP when it's sending ...
0
votes
3answers
30 views

outgoing ssh fails from only one machine on lan to outside network

I have multiple servers in my LAN (which I'll refer to as Box1), and they are all able to make outgoing SSH connections, except one that stopped recently, which I'll refer to as Box2 (actually, I'm ...
0
votes
1answer
21 views

Reach ssh server behind a router on embedded system using established socket connection

I have developed an embedded application running linux to do remote I/O control. The application open a socket connection to my server to communicate, periodically, the state of the I/O and getting ...
0
votes
1answer
72 views

Block All Traffic and Allow from Defined IP only in IPTABLES

I want to create a gateway firewall for my network . I want to block all the internal traffic on gateway and allow it from two computers only . On gateway --> eth0 is network card in gateway PC ...
0
votes
0answers
14 views

Wrapping a point-to-point link

I'm using a pair of IP radios (non-WiFi) to bridge my office engineering LAN (172.0.0.0/8) to a lab in another building. The radios work fine, but they expose a web management interface I'd like to ...
0
votes
4answers
78 views

Remote into Linux workstation behind a firewall using NoMachine or other remote desktop service

My question is very similar to this question: Remote into Linux workstation behind a firewall My work has firewall and ssh server. The ssh server is listening to the default port 22. Normally I ...
1
vote
0answers
59 views

Why does NTP require bi-directional firewall access to UDP port 123?

From What are the iptables rules to permit ntp?: iptables -A INPUT -p udp --dport 123 -j ACCEPT iptables -A OUTPUT -p udp --sport 123 -j ACCEPT Also, from the NTP website: ... ntpd requires ...
0
votes
1answer
54 views

iptables --append FORWARD required for routing between NIC alias IPs?

I have an ubuntu box with a single NIC. In order to bind a number of services (like apache, dnsmasq, etc), I have bound them to different alias's (e.g. eth0:0, etc), some of which are on completely ...
0
votes
1answer
16 views

Firewall rule for local, interactive users?

I want to add a firewall rule that applies to a local interactive user. The intention is to clamp down the box, and only allow web and mail related connections, and update service connections. On ...
0
votes
1answer
73 views

How do I fix these iptables?

I am trying to setup my networks firewall, and am having trouble because i keep getting kicked out of SSH because of mistakes. Here's what I currently have: # Custom Rules iptables -F iptables -X ...
0
votes
0answers
46 views

UFW Not Allowing Apt-Get and other HTTP Services Out

I've built a limited firewall appliance out of a Raspberry Pi, two NIC cards, and a Raspbian OS using UFW for the firewall. Another Pi (also on Raspbian) sits behind it as an application/web server. ...
0
votes
1answer
39 views

Ports in Linux vs Windows

I'm studying for a security class. I know that ports in Linux are tied to a process. So if I wanted to close/shutdown a port, I'd end the process that's using it. So if I'm in Windows, what's ...
1
vote
1answer
215 views

iptables blocking all traffic even with ports opened

Simple as I can put it: I can't access my servers with iptables enabled, with default rules. Need to disable iptables to get access. Trying to find the cause. Only difference in setup type is layer3 ...
1
vote
0answers
75 views

Conntrack/NAT's port mapping for a specific port breaks whenever that port's service is shutdown for too long. How can I fix this?

Linux Gentoo 3.13.6-hardened-r3 #1 SMP Sat Apr 12 09:17:25 EDT 2014 x86_64 Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz GenuineIntel GNU/Linux hardened with grsecurity and selinux with a strict policy in ...
1
vote
0answers
139 views

Is it possible to route all traffic on VirtualBox host adapters to guest?

I am upgrading Ubuntu 8.04 on a dedicated router/firewall/NAT/SMTP/SSH server with a current Linux (Debian Wheezy). I am using VirtualBox (4.2) with Ubuntu 8.04 as host and the new Debian build as ...
0
votes
0answers
136 views

configure iptables to block all(as much as possible) bittorrent traffic

good day all This is my current iptables setup Generated by iptables-save v1.4.7 on Wed Apr 9 13:50:31 2014 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :LOGDROP - ...
0
votes
1answer
72 views

IPtables preventing outgoing packets

I am trying to setup firewall rules on a RHEL webserver, so that my webserver can serve up web pages and at the same time download remote files using curl/wget. Problem I am experiencing is I can only ...
0
votes
0answers
52 views

Display port numbers and port names

How do I display both port numbers and port names at the same time? I can display the forward port numbers (i.e. 22, 25, 1000, 443, 80) using the following: [root@michaels ~]# iptables -L -n Chain ...
0
votes
1answer
35 views

why iptables is accepting all in INPUT?

As we can see in this, which is the default iptables on fedora 20 $ iptables -L INPUT --line-number Chain INPUT (policy ACCEPT) num target prot opt source destination 1 ...
2
votes
1answer
77 views

SSH: can connect to computers on local network but cant connect remotely

I have 3 computers running ssh server on them: PC1 is running Cygwin on Windows PC2 is also running Cygwin on Windows PC3 is running Linux and they are on the same network connected to same ...
0
votes
1answer
554 views

Forwarding all incoming traffic on eth0 to go to eth1

I am trying to setup my raspberry pi to sit between my router and my modem. I'm basically trying to set it up as an intercepting proxy so that all web traffic goes through the proxy. I have the ...
1
vote
1answer
151 views

bind/named not working on UDP from external

This one is weird. I've set this up a long while ago, on a centos5. From what I remember, it used to work. For some time now, it's not. I've just been informed so no clue what changed when that made ...
0
votes
1answer
148 views

How do I block every connection except vpn and ssh without endangering the state of my vps?

I have some vps space but I get alot of scans based on what I see in iftop. I tried some iptables stuff but it gets tiring and useless to put all the ips that I see in the logs. I am wondering about ...
0
votes
2answers
139 views

Firewall - Allowing DNS for allowed domains only

Some firewalls blocks domains on DNS level. It stops getting IP addresses by ping or other DNS query for those blocked domains. I tried creating a firewall using iptables, but it still sends an IP ...
0
votes
2answers
269 views

SSH to a computer behind a firewall and router

I'm trying to connect to my Raspberry Pi, which is behind a router and a firewall. My PC (running linux) is also behind a router and firewall. Both firewalls only allow the ports you would need for ...
1
vote
1answer
111 views

iptables detects clients behind NAT?

I'm setting up a server that I want to protect from DoS attacks, by setting a limit using iptables: iptables -A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT (default ...
0
votes
1answer
75 views

how to restore iptables after iptables -F?

I used iptables -F on my machine, and what can I do to recover the iptables into the default without rebooting my machine? I restarted the iptables service and it failed, and I can't find iptables ...
1
vote
1answer
138 views

Iptables limit user access time and mac

I am trying to create an iptable chain to kick my daughter off her ipad during the night. With the mac only filter I can block access but when I add time it no longer works. Does anyone see an issue ...
0
votes
0answers
192 views

Dropping Packets with Openvswitch Openflowcontrol

I am trying to setup some Flows with ovs-ofctl to block all unwanted incoming packets for a VM. The commands I use are: ovs-ofctl add-flow xenbr0 "priority=65000, table=0, tcp, dl_src=*, nw_src=*, ...
0
votes
1answer
201 views

Iptables filtering and NAT with secondary IP address

I have two IP addresses on my physical eth interface. Lets say 192.168.10.7 (eth0:0) and 192.168.0.7 (eth0). So it works. But I use application, working on the only one of this addresses on port ...
1
vote
1answer
133 views

With iptables only allow certain outbound ports

Okay, I'm running a router with shibby tomato (linux based) v1.28-115 and have a bridge network setup (br1) that consists of a guest wifi. I want to only allow access to specific outbound ports... ...
0
votes
1answer
84 views

Will using iptables DROP target cause TCP CLOSE_WAIT that never completes?

I have some simple rules to block certain IP blocks used frequently by hackers/spammers, e.g.: iptables -A INPUT -s 173.208.250.0/24 -j DROP But, I noticed that apache hangs after a couple of days ...
0
votes
1answer
244 views

iptables stupid error (iptables -A INPUT -j ACCEPT)

[root@router ~]# iptables -A INPUT -j ACCEPT iptables: No chain/target/match by that name. How is that possible? I recompiled the kernel (3.11.8) and updated iptables to 1.4.16. The strage thing is ...
2
votes
1answer
178 views

Firewall is blocking internet traffic to OpenVPN clients

I have a virtual network setup with a Linux router/firewall connected to two private networks. An OpenVPN server in routing mode and a web server are in one of the networks. On the other are linux ...
0
votes
1answer
209 views

Understanding how dnat works in iptables

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.3 and ...
0
votes
1answer
46 views

unable to start apache after changes to rc.conf and resov.conf

I had a working configuration this morning with the following simple /etc/rc.conf ifconfig_rl0="DHCP" ifconfig_xl="inet 192.168.1.11 netmask 255.255.255." defaultrouter="192.168.1.1" I added the ...
0
votes
1answer
63 views

lost connectivity after changes made to rc.conf (freeBSD firewall)

I had a working configuration this morning with the following simple /etc/rc.conf /etc/resolv.conf is completely commented out. ifconfig_rl0="DHCP" ifconfig_xl="inet 192.168.1.11 netmask ...
0
votes
1answer
275 views

Redirect PROXY traffic to test box using IPTABLES

Marked this as answered. I'm going to pass on trying to get this to work. It was only for testing. I'm currently using a proxy server (squid) that's listening on port 8080. Users' browsers are ...
0
votes
1answer
95 views

iptables FORWARD rule

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.1 and ...
1
vote
0answers
66 views

Define IPTABLES rule

I am working with a linux based UTM appliance and have some disagreement with the client on the operation. THere is a standard GUI to configure port forwards in the firewall but for some reason he ...
0
votes
0answers
275 views

nc -v -w 1 111.111.111.111 -z 22 returns port 22 (tcp) timed out: Operation now in progress

Encountering a strange problem on my Ubuntu machine, trying connecting to 111.111.111.111 (example ip) via SSH fails. When trying to connect from other win machine its works. I don't have a ...
1
vote
1answer
388 views

UFW rules for specific host / dynamic dns

How can I setup UFW (Uncomplicated Firewall) to add rules for specific hosts? Eg. I want to allow SSH only from yourpc.no-ip.org?
0
votes
0answers
117 views

Public IP is not accessible

I have a VPS, after a DDos attack, the service provider disabled my server until the attack finished. After recovering from the DDos, the main IP is not accessible at all! I don't know where to look. ...
0
votes
1answer
64 views

Limit download over certain filesize through network

This is more of a network question rather than programming but Is there a way to limit a download over lets say 20MB to throttle at 16KB? I am trying to limit files over 20MB to throtle at lets say ...
2
votes
2answers
122 views

Keeping a slowish DSL connection responsive

I have a Linux box serving as a firewall/router for our home network. I live out in the boonies, so I have a relatively slow broadband connection: Downstream Rate 7616 Kbps Upstream Rate 512 ...
0
votes
0answers
45 views

How to replicate couchdb instances behind home router firewalls?

What are the options (if any) to allow replication between couchdb instances without portforwaring the couchdb port on a home router? Assuming both couchdb instances are behind home router firewalls.
1
vote
1answer
340 views

Internet access to host behind firewall using ssh tunnel

My goal is to give host behind firewall access to the internet. Below you can find brief description of network [internet] <-> [proxy] <-> [A] <-> (firewall) <-> [B] [A] - ...