Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
0answers
6 views

Configuring iptables for guest WLAN in DD-WRT

I'm constantly failing to get a guest WLAN in DD-WRT working. I can connect to the second SSID and get an IP address of the second DHCP server range. But I cannot connect to the internet. I followed ...
-1
votes
0answers
28 views

How can I route all client Internet traffic through an OpenVPN TAP bridge with Tomato?

I've inherited a Linksys WRT54G router and I'm looking to use either Tomato or DD-WRT to set it up as an OpenVPN client to my home network in Chicago, forwarding all traffic through the VPN link so I ...
0
votes
0answers
11 views

Route Specific URL to another interface on Linux

I have a Raspberry Pi Model B running Raspian. RPi is in between of my local network and Internet Router (as gateway; so all traffic is passing from RPi's eth0 interface to virtual interface eth1). I ...
0
votes
0answers
11 views

Determining whether a port is closed (no one is listening) or iptables reject my host

Can I tell whether the service I'm calling has a reject rule in its iptables or it doesn't listen on the port I'm calling? it seems that I always get icmp port unreachable
0
votes
0answers
9 views

iptables - Cannot redirect with 443 (Https) port

I'm using this command to redirect all web traffic (http and https) to my local server iptables -t nat -I PREROUTING -p tcp --match multiport --dports 80,443 -j DNAT --to 192.168.11.100 But when i ...
0
votes
1answer
6 views

Using ppp0 via VPN for everything but ftp

I have an ubuntu server I use to wget certain files from the internet via a VPN. I have set the VPN up using PPP0 and currently adjust the route like this: sudo route add default ppp0 Everything ...
0
votes
0answers
11 views

iptables - How to remove connection tracking

I'm using this command for redirect all web traffic (http) into my local web server iptables -t nat -I PREROUTING -p tcp --dport 80 -j DNAT --to 192.168.11.100 Then i test, access a website and got ...
0
votes
0answers
12 views

Log and drop packets with iptables

I am using these two alternatives to log packages dropped with iptables: -A INPUT -p tcp --dport 21 -j LOGNDROP # We do not have FTP # The LOGNDROP chain: log messages (rate-limited) and drop all ...
1
vote
1answer
39 views

SSH reverse tunnel into Docker container

I need to xdebug something that fails on the server in a docker container and from my laptop I have ran ssh -R 9000:localhost:9000 server and verified the tunnel by telnet localhost 9000. So far so ...
0
votes
1answer
20 views

iptables failed with “ iptables v1.4.21: Couldn't load match `-d':No such file or directory” message

I am running kernel 3.14.18 and using iptables 1.4.21, built with these options --static-enable --disable-shared. When I run this command: /sbin/iptables -A PREROUTING -m -d 127.3.0.2/24 -j DNAT ...
0
votes
2answers
8 views

How configure requests from other ports to port 443?

I am trying to configure my first https, and i think i get it, but there is a problem: the site wont open in http, just https, because of this, i want redirect everything to https. I am using ...
-1
votes
0answers
16 views

Forward 3389 port from Ubuntu to a Windows Server

I have an Ubuntu 14 Server Live, I need to get access to an internal Windows server through Ubuntu, I have tried Apache2 Reverse Proxy and tried iptables, but it’s not working as expected. And I ...
0
votes
1answer
31 views

How to allow only subnet for port with iptables

What i am trying to do is to DROP any packets to specific UDP port, except those one from my secured subnet 10.8.0.0/24. iptables -t nat -A --src 10.8.0.0/24 -p udp --destination-port 63210 -j ACCEPT ...
0
votes
0answers
7 views

How can I see the currently installed netfilter hooks?

Not just the iptables, is it possible to see the currently installed netfilter hooks in Linux PC? Such as the home-made kernel modules that installs netfilter hooks for someone's own filtering rule?
0
votes
0answers
32 views

Open ports with iptables — still closed

I'm trying to open some ports for a gameserver, which is running on my Linux vServer (Ubuntu 14.04 LTS 64bit). The game needs the following ports: 16261 (UDP) 16262 (TCP) // Player 1 16263 (TCP) // ...
0
votes
0answers
21 views

Connectivity from different network segment

I have 3 machines 10.10.3.1 Windows # srv1 10.10.3.2 Lubuntu # srv2 10.10.200.1 Windows #cli1 network masks are 255.255.255.240 I can succesfully ping from cli1 to srv1 srv1 to srv2 srv2 to ...
0
votes
0answers
28 views

Connecting to mysql server at 127.0.0.1:3307 with iptables port redirect

I have a ruby application which, for various reasons, connects to a mysql server running at 127.0.0.1:3307. This works perfectly on the server side, but now I want to run this application on my ...
0
votes
0answers
10 views

IPTables NAT to webserver how to forward real remote IP

I have a simple setup where I host a webserver in my local LAN 172.16.0.0/27, port 80. It is connected to my DD-WRT router that has a publich IP (direct Internet connection), let's say 1.2.3.4. I set ...
0
votes
2answers
39 views

How to use iptables to allow traffic only throug ONE SPECIFIC VPN

I'm trying to allow all traffic from my Banana PI running Lubuntu to only go to my LAN or otherwise through an VPN Server. I'm following this guide: ...
0
votes
0answers
15 views

Iptables Port Forwarding To Different IPs Based on Port

On a CentOS 6 server with an IP address of 172.16.1.10, how can I configure iptables to route traffic destined for 172.16.1.10:80 to 192.168.1.10:80, and traffic destined for 172.16.1.10:8080 to ...
-1
votes
1answer
34 views

DD-WRT Wifidog - Redirect isn't working

I have flashed a ASUS AC-RT56U router with DD-WRT version V24-preSP 2201412-22-2014-r25697. Now I want to make it into a hotspot with wifidog TO PLACE IN A SMALL BUSINESS (FITNESS CENTRE) I have ...
1
vote
1answer
32 views

How to redirect TCP traffic from one virtual machine to another in Linux?

What is the simplest way to redirect all TCP traffic from one virtual machine to another in Ubuntu Linux and reverse? And what type of connection I suppose to use in VirtualBox?
0
votes
0answers
45 views

How to split traffic between vpn and ISP

I have vps with configured open VPN server and my router with openWRT and openVPN client. In this moment I can route all my traffic via vpn or ISP. But I want route some connections (for example on ...
0
votes
1answer
40 views

Routing 6to4 packets through NAT

I have a linux router(dd-wrt w/o ipv6 module, no space for that) and a linux PC(Arch linux). I'm trying to setup my router to forward 6to4 packets(protocol 41) to my PC and setup the tunnel on it. ...
0
votes
1answer
23 views

iptables drop packets by IP protocol type

Is it possible to have iptables rules to drop packets by IP protocol type as described in [http://www.tutorialspoint.com/ipv4/ipv4_packet_structure.htm]? (ICMP is 1, TCP is 6 and UDP is 17, but what ...
0
votes
0answers
28 views

Redirect traffic destined for IP and port

I have a program that wants to connect to 1.2.3.4 on port 5678, but it can't because the port is blocked on our network. However, I do have an SSH tunnel set up that redirects localhost:5678 to ...
1
vote
1answer
38 views

Using iptables to allow LAN and drop WAN of unknown devices

I posted this over on stackoverflow but it was off-topic. I have looked around and couldn't find the answer to my question. I am using a raspberry pi as an internet gateway between my LAN and two ...
1
vote
0answers
33 views

How to configure iptables to set public IP for outgoing traffic from private IP

I have multiple public IPs at home: 1.1.1.1 (main IP) 2.2.2.2 (additional IP) In my local network, I have two computers, let's say 192.168.1.1 (PC1) 192.168.1.2 (PC2) Infront of the computers I ...
0
votes
1answer
24 views

slow internet access when routing via a server (both using iptables NAT and ssh tunnelling)

I have a spare computer powered by a dual core intel atom N550 CPU and 2GB RAM (I will refer this as "the server"). It is running lubuntu 14.10 x86 (32 bit) with lightdm service disabled (hence, no ...
0
votes
1answer
15 views

How do you force linux to treat a tcp packet as if it were at the destination ip?

The situation: A tcp packet arrives on eth0 with destination 8.8.8.8. This packet meets some criteria that makes me want to intercept it (lets say I am interested in all packets from source ...
0
votes
0answers
35 views

VPN does not reconnect (cannot resolve host address)

maybe someone can help me: At the moment i am trying to configure a fail-safe VPN connection to a commercial VPN provider on a virtual machine. This is working fine, until my router wants to reset my ...
0
votes
0answers
35 views

DDWRT - OpenVPN connects, but can't communicate

This seems to be a popular topic, but I can't find any solution to the same problem I am having. Here's the setup: I have a DD-WRT router (build 14896) on a linksys WRT54GL. I have one file server ...
0
votes
0answers
22 views

how to capture “DROP”ped packets on OUTPUT of iptables?

having a fairly complex OUTPUT processing on iptables, how does one go about capturing / displaying (at least similarly to how tcpdump captures them) the packets that were to leave through an ...
0
votes
0answers
14 views

Webserver connected to VPN: Way of incoming traffic?

All apologies if my question is unclear from the start; but: I have a webserver which is a rented root-server at a provider. It is running a webshop that is openly accessible. It is necessary to ...
0
votes
1answer
29 views

Iptables rules suddenly not working

I'm trying to set up a webserver using an Odroid U3; as OS I have Debian 7.4. The issue came when trying to load the iptables rules with iptables-persistent. I'm using the same file with rules I've ...
0
votes
0answers
35 views

Iptables stops the network after a while

I have 3 dedicated servers (same hardware Supermicro X8STi and same bios) with CeontOS 7 Linux 64Bit and I'm having a problem with one of them, with iptables to be precise. When I change the policy ...
0
votes
1answer
54 views

Block archive.today From Crawling My Site?

My website is being scraped by archive.today. This site is similar to the reputable archive.org, but archive.today does not obey robots.txt, spoofs a generic user-agent and tried to hide its IPs. The ...
2
votes
0answers
56 views

Routing traffic around VPN

I recently setup a OpenVPN client on my HTPC, however once I connected to the VPN server I was no longer able to remotely SSH or connect to the other servers I had running on the HTPC. I followed ...
1
vote
1answer
38 views

iptables always needs restart

I have a CentOS 7 PC, on which I'm using iptables. I have an Oracle 11gR2 instance on that PC and I need to access is from other PCs in the LAN. My /etc/sysconfig/iptables: # Generated by ...
0
votes
0answers
25 views

blocking port54370 tomato router

I'am having a huge amount of outbound traffic on my network. source port is 54370. Jan 16 00:34:55 unknown user.warn kernel: ACCEPT IN=br0 OUT=vlan1 SRC=192.168.11.88 DST=192.168.0.11 LEN=116 ...
0
votes
0answers
22 views

How to create two different open VPN link between two hosts?

I want to create OpenVPN tunnel between two Ubuntu 12.10 hosts which has two interfaces, say: Host1: eth0, eth1 Host2: eth0, eth1 A tunnel is wanted between: Host1 (eth0) <-> Host 2 (eth0) Host1 ...
0
votes
0answers
13 views

how to Connection from a remote system to another via multiple squid proxies?

I have a setup that sending data from host 1 to host 2 via proxy running different middle hosts. I don't want just routing packets in middlehost and send to destination. The reason is I run new MPTCP ...
0
votes
1answer
162 views

Can ping but can't connect (curl, wget, apt-get, etc.) (rasberry pi server)

Background: I am trying to set up a rasberry pi server. Everything was going well and my pi could apt-get update etc, until I got the port forwarding to work and ssh to work outside of the LAN. I ...
0
votes
1answer
102 views

iptables out bound port to remote mysql

Following is my iptables file on my centos, I am unable to open 3306 port to connect to remote mysql server. I dont know what I am doing wrong although it looks fairly simple. When I stop the iptable ...
0
votes
0answers
29 views

How do I reroute a DNS request?

I have a Technicolor (Thomson) Modem, and I want to reroute a DNS request coming from a specific IP to another DNS server. I have an iptables command looking like this: iptables -I PREROUTING -t nat ...
0
votes
0answers
19 views

Iptables rules for host-only interface

I'm in this situation. I have an host machine running Ubuntu and 2 virtual machines using VirtualBox. They're connected via the host-only option on the virtual interface "vboxnet0". What I want to ...
0
votes
0answers
20 views

How to acchieve what http_proxy environment variable does for all traffic leaving the system?

I set up a trafficserver (5.1.2) instance as HTTP cache on a machine in my local network and now I'm looking for a way to enforce the usage of the proxy for HTTP requests to the outside world on port ...
0
votes
1answer
38 views

Share Internet through Arch Linux VM

I'm working with a LAN which is behind a router that I don't control. The router admin has allowed internet access to one IP address 192.168.0.50. I would like to create an arch linux VM at that ip ...
1
vote
1answer
23 views

Iptables newbie pain

I got a host (WINDOW7) and a guest (DEBIAN7.7) virtualized by VirtualBox. I configure an eth1 interface as host-only. My host can ping the guest and vice-versa, host can connect via ssh too. Now I ...
1
vote
0answers
45 views

Limit connections per second with iptables/ufw

How can I tweak the following entries to allow more requests per second? Maximum hitcount is 20 if you do not edit some other config files. The entry of my /etc/ufw/before.rules file -A ...