Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
1answer
7 views

CentOS - ipTables

I have some questions about ipTables. Is it possible to open all ports between 2000 and 6000 and then have 2245, 5435,5434 closed? Is it possible to open some ports from a ip address? Eg. The only ...
0
votes
0answers
30 views

CentOS 7.x iptables

I have manually edited the /etc/sysconfig/iptables file in my CentOs 7.x installation , I have two entries and two processes running at the respective ports. I am able to telnet/access port 2181 but ...
0
votes
0answers
12 views

Why won't my proxy server connect to the internet?

I'm setting up a dedicated machine to run a transparent proxy server for my network, but for unknown reasons, clients can connect to the machine, but the internet isn't working. There seems to be a ...
0
votes
1answer
29 views

Need help converting some linux commands to OSX

I want to convert some linux commands into OSX. (Mavericks 10.9.4) root@bt:/# /etc/init.d/apache2 start (will "sudo apachectl start" do the same?) root@bt:/# echo “some Site Goes Here!” > ...
0
votes
1answer
22 views

squid proxy slow response

We are using the squid proxy in our setup and implemented as transparent proxy with user authentication. Before couple of days, while we are trying to setup the iptables the squid started performing ...
0
votes
0answers
13 views

How to correctly configure iptables on a laptop?

I have run these commands (tried switching the order too) because I want to set up a firewall on my laptop so that nobody can connect to it (except of course in response to a connection I've made): ...
0
votes
1answer
34 views

Why doesn't SpeedTest.net Upload work in Windows when using a Debian-router?

There is a FTTx connection. I connect ISP cable to the WindowsXP pc, setup PPPoE. SpeedTest.net shows normal Upload / Download. Now I connect ISP cable to router with Debian 7.5 installed, set up ...
0
votes
0answers
29 views

udp client sending ICMP “port unreachable” when receiveing messages from the server

(Note: I moved this question from StackOverflow, because it's to be considered off-topic there, better fits here, and still unsolved) I have a udp client using luasocket, basically doing this (with a ...
1
vote
1answer
29 views

Should my server ever need to directly communicate with the NAT gateway?

What I mean by ``directly communicate'' Does it ever need to receive packets with the gateway's IP address as the source IP address, or send packets with the gateway's IP address as the destination ...
0
votes
0answers
8 views

Redirect external request thru VPN

I'm using Centos 5.4 and I'm trying to use the XMPP outside the company. But, the XMPP only works with the VPN. VPN connects and the XMPP become 10.0.2.49:5222 I tried to use iptables using this: ...
0
votes
0answers
12 views

iptables configuration on Windows Azure (CentOS 6.5) for endpoint load-balanced set

I created 2 VMs (CentOS6.5) on Windows Azure for Postgresql database and HA cluster, everything works fine except when I set iptables service on, the endpoint load-balanced set is down. for security ...
1
vote
3answers
17 views

Firewall init script

On Debian, what is the best way to start an iptables firewall script : /etc/init.d/firewall_script.sh in /etc/network/interfaces, add post-up /etc/network/if-up.d/firewall_script.sh Do you check ...
0
votes
0answers
18 views

Openvpn iroute traffic to internal network

I have a simple scenario like follows : 3 openvpn clients and an openvpn server , openvpn clients are (C1 , C2 and C3 ) openvpn server is (S1) behind the 3 clients ( C1 a network of 192.168.1.0/24) ...
-1
votes
2answers
28 views

mirroring traffic with iptables doesn't work

i want to mirror specific traffic to ip 192.168.200.1 i use this solution : Mirror Port via iptables but when i enter following command, error occurs: iptables –I PREROUTING -t mangle -j ROUTE --gw ...
2
votes
1answer
18 views

IPSet with IP6Tables ERROR

Can someone please solve my headache and tell me how to fix this? [root@www xtables]# ip6tables -I INPUT -m set --match-set blacklist6 src -J DROP ip6tables v1.4.7: Couldn't load match ...
0
votes
0answers
9 views

rails ssl setup on Amazon EC2

Environment Amazon EC2 CentOS Rails 4.0.4 SSL certificates installed Chef My Rails config In my environment .rb (staging.rb and production.rb) I added this config.force_ssl = true Started ...
1
vote
1answer
34 views

Iptables rules to only whitelist SIP providers

I have an Asterisk box sitting behind an ADSL router/modem. There are no other services on the Asterisk box, just telephony. I am getting a lot of traffic which I think are SIP probes. I've ...
0
votes
0answers
29 views

Allow internet access to intranet only users using Nginx on Ubuntu

I need to allow some users who only have access to the intranet to access one specific internet site. I'm doing this by using Nginx as a reverse proxy. To test this, I would like to block all internet ...
0
votes
0answers
18 views

How do I “socksify” IPv6 TCP connections?

For IPv4, one can use REDIRECT iptables target and redsocks/tcpsocks. How to do the same for IPv6? I've tried ip6tables -t mangle -A PREROUTING -d 2600:: -p tcp --dport 80 -j TPROXY --on-port 4455, ...
0
votes
1answer
29 views

Redirect ports with iptables

I need to do redirect port 443 on all interfaces to 8080 on one interface using iptables on a box with 2 NICs. I also need to block pretty much anything else on those interfaces. Here is my iptables ...
2
votes
0answers
44 views

Block all outgoing traffic for a User running Wine apps

Good day, I'm using a lot of WINE apps under Linux which work just fine, but one thing I am specifically looking for right now is to block their access to the internet (outgoing), with exception of ...
0
votes
1answer
29 views

block network access to a domain (ubuntu)

I have a few ubuntu servers in various geographies. I want to block all outgoing connections from all ubuntu machines (all processes) to several domains, e.g. www.server.com. I know iptables can block ...
0
votes
3answers
30 views

outgoing ssh fails from only one machine on lan to outside network

I have multiple servers in my LAN (which I'll refer to as Box1), and they are all able to make outgoing SSH connections, except one that stopped recently, which I'll refer to as Box2 (actually, I'm ...
0
votes
2answers
40 views

Wifi sharing over eth0

There are a lot of tutorials how to share network connection with your usb wifi adapter and I tried lots of them but it is still not working. Can you please help me with my problem. Here is my network ...
0
votes
0answers
30 views

iptables error “FIX ME! implement getprotobyname() bionic/libc/bionic/stubs.c”

When I do this rule, the error shows up iptables -A INPUT -p tcp -m tcp -m multiport ! --dports 80,443 -j DROP I've also found some solutions. getprotobyname() just converts protocol names like tcp ...
0
votes
1answer
19 views

Cant connect to eth0 after wlan0 sharing with iptables

I wanted my Ubuntu server to act as a wifi hotspot. So I set up hostapd to allow wifi connections. I then setup dnsmasq to provide the DHCP settings. I then added the following iptables rules, so ...
0
votes
1answer
41 views

OpenWRT and iptables: redirect all traffic from ip1 to ip2

I'm aware of other questions with the same topic, but I couldn't get it to work. I'd like to forward inside my local network all traffic from ip1 to ip2. Only from inside the network, no outside. I ...
1
vote
3answers
89 views

How to block all ports except 80,443 with iptables? [duplicate]

Blocking all ports(in and out) is easy but it's hard with the word "except". I don't know any rules that satisfies the condition. PS: I know this question is nothing new. But in fact, I didn't find ...
0
votes
0answers
51 views

Route incoming traffic from VPN Clients through localhost-proxy on VPN server?

I’m still quite a newbie to Linux in general and I want to learn by establishing useful projects. My actual project is for a vpn-server to get rid of ads, cookies etc. for all clients. Meaning: No ...
1
vote
2answers
150 views

Limit incoming connections using iptables per IP

I need to limit access to some port per IP. Let's say 5 connections per minute - not more. I've seen iptables recent, connlimit and limit, but all of them are not fitting exactly what I need. ...
1
vote
5answers
67 views

How to forward traffic using iptables rules?

I am new to iptables and I have been doing Google searches for a few days now without finding a good solution to this problem. I have computer A with a public ip address (say 192.0.2.1) that can ...
0
votes
1answer
48 views

Asterisk server firewall script allows 2-way audio from incoming calls, but not on outgoing?

I'm running an Asterisk PBX on a virtual machine directly connected to the Internet and I really want to prevent script kiddies, l33t h4x0rz and actual hackers access to my server. The basic way I ...
0
votes
1answer
70 views

Equivalent iptables command on OS X 10.9

I want to redirect the tcp traffic temporarily to a custom port. On Linux, I use the following command: iptables -t nat -A OUTPUT -p tcp --dport 1935 -m owner \! --uid-owner root -j REDIRECT and to ...
1
vote
1answer
26 views

Add IPtables rule by script at the request of another computer

I wonder, is it possible to make an script, which adds rule in iptables by request from other pc? I mean, script "knows" what to do, but addres for rule comes from request. And how do you think it ...
0
votes
1answer
82 views

Block All Traffic and Allow from Defined IP only in IPTABLES

I want to create a gateway firewall for my network . I want to block all the internal traffic on gateway and allow it from two computers only . On gateway --> eth0 is network card in gateway PC ...
1
vote
1answer
33 views

Bitbucket SSH and iptables

I'm a newbie in iptables to be honest. I have some basic rules. Everything is blocked by default. iptables -t filter -F iptables -t filter -X iptables -t filter -P INPUT DROP iptables -t filter -P ...
0
votes
1answer
71 views

Iptables mark incoming packet - vpn routing

I have connected my home to my workplace for out of house backup reasons through OpenVPN. The connection is working nicely. At work I have 5 fixed IP addresses. Now I would like to assign one of ...
1
vote
1answer
69 views

Combination of NAT, DHCP, and OpenVPN on lubuntu 14.04

Okay, so I've got a set up, where eth0 my internal IP address (192.168.1.3) it has been configured as my default gateway using the iptables this sudo sysctl -w net.ipv4.ip_forward=1 sudo ...
0
votes
1answer
33 views

iptables: Is it dangerous to filter by source port?

I would like to run a stateless firewall setup and I currently have the following rules: #Do not track any packet *raw :PREROUTING ACCEPT [0:0] -A PREROUTING -j NOTRACK COMMIT #Actual firewall rules ...
0
votes
0answers
115 views

Routing inside Virtualbox Linux Guest on Windows Host connected to WiFI

How can I route a whole net traffic from a laptop (192.168.1.100) connected via WiFi to a router (192.168.1.1) to which I don't have access and cannot mofidy routing table, to other host in this same ...
0
votes
1answer
43 views

IPTables and PPTPd

I'm trying to add the line -A POSTROUTING -i ppp0 -j MASQUERADE to my IPTables in order to allow VPN to have access to the entire internal and external network (eth0, and eth1), but when I try to ...
0
votes
0answers
25 views

I want to exclude the port xxxx from my iptable rule

I want Transmission to use the vpn (tun0) for the torrent stuff, but I also want to access the web interface from my local network. Any suggestions? For the first part, I already tried this.
0
votes
1answer
61 views

iptables --append FORWARD required for routing between NIC alias IPs?

I have an ubuntu box with a single NIC. In order to bind a number of services (like apache, dnsmasq, etc), I have bound them to different alias's (e.g. eth0:0, etc), some of which are on completely ...
0
votes
1answer
42 views

How to add iptable support to the kernel (for Wheezy/Sid release)

I am running an ARM processor (similar to the raspberry pi) and my kernel doesnt natively support iptables. If I run apt-get install iptables, it successfully installs but NAT tables are unable to be ...
3
votes
4answers
167 views

IP forwarding from one interface to another on Debian 7

Background The Debian 7 that I run has the following interfaces wlan3 == Internet connection 85.5.48.64/24 wlan2 == act as an AP (hostapd) 192.168.5.1/24 I run the following settings on the ...
0
votes
0answers
28 views

linux machine as two internet gateway connection?

I have linux machine (arch linux) which has there network interface eth0,eth1,eth2 AND two vlan eth0.1 192.168.10.1, eth0.2 192.168.20.1 and two Internet connections eth1 10.0.0.1, eth2 10.0.0.2 how ...
0
votes
1answer
16 views

Firewall rule for local, interactive users?

I want to add a firewall rule that applies to a local interactive user. The intention is to clamp down the box, and only allow web and mail related connections, and update service connections. On ...
0
votes
1answer
38 views

Run shell script on incoming network package

I have a bit of a weird question. I have a setup where a Raspberry Pi (running that debian) sits next to a door in my office and is connected to the network. The idea now is that if somebody inside ...
0
votes
0answers
25 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat -A ...
0
votes
1answer
81 views

How do I fix these iptables?

I am trying to setup my networks firewall, and am having trouble because i keep getting kicked out of SSH because of mistakes. Here's what I currently have: # Custom Rules iptables -F iptables -X ...