Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.
0
votes
0answers
28 views
Can iptables be used to convert a single-homed host into a NAT server?
I have an Internet-enabled machine, HostA, with one NIC. I have another machine, HostB, with one NIC that is not Internet-enabled.
I would like HostB to be able to share HostA's Internet-connection. ...
0
votes
1answer
20 views
How do I drop the entire INPUT chain from iptables?
On Linux, I've been building a malicious IP list. I assume the DDOS is now gone. How do I drop the entire INPUT chain from iptables, without affecting the FORWARD or OUTPUT chains?
0
votes
1answer
15 views
Linux gateway / DNAT: restrict to certain interfaces
I have various machines with a number of network interfaces:
eth0: a local LAN
eth1: sometimes used for the connection to the Internet gateway
ppp0: Modem uplink as an alternative to eth1
tun0: ...
0
votes
0answers
9 views
Forwarding traffic using nc on a linux box
On my system, I am sharing my internet which is on eth0 (ethernet) through wlan0 (wifi card).
I am then using mitmproxy to monitor the traffic and look into the ssl packets.
However, mitmproxy only ...
1
vote
1answer
18 views
Allow shell access for key holders OR password login for whitelisted IP addresses
As a first line of defense against brute-force attacks, I've restricted SSH login attempts with TCP wrappers (denying access by default, and maintaining an IP whitelist in /etc/hosts.allow).
However, ...
0
votes
0answers
47 views
Limit UDP outbound traffic to loopback (localhost) instead of eth0
Atm i'm testing it on Ubuntu Server at VMware Workstation + Windows 7 local host with bridged connection. Later this has to go to live server.
I have VLC streaming video file on Ubuntu with
cvlc ...
0
votes
2answers
15 views
Problems in creating rules in iptable
Hello to all :) I need a little help with creating a rules. Im starting to learn iptables and firewalls but I have some questions. I need to allow HTTP communication only from PcA to PcB./
My code is:
...
0
votes
2answers
47 views
How do I route a port range in a linux host to a guest VM?
I am trying to redirect a certain port range in a linux host to one of its guest VMs. I would like for this redirection to apply to all the host's interfaces, including localhost. I was able to do:
...
0
votes
0answers
31 views
Updating iptables via ddclient
TL;DR
Is there anything I can do to change iptables from ddclient (with user ddclient)?
The story behind
I have a computer that uses dyndns to be addressable from outside.
Whenever the provider ...
0
votes
0answers
34 views
iptables rule for loopback interface lo
I want to test some network performance, where I need to use a tcp client to connect to a tcp server program on the same host, so I used localhost(127.0.0.1)
however, when the TCP SYN is sent, it get ...
0
votes
0answers
17 views
redirect traffic from 2 Ubuntu external NICs to specific internal hosts
I am having problems redirecting incoming traffic to 2 external facing interfaces on my Ubuntu 12.10 server to 2 separate internal hosts. I am able to redirect incoming traffic on my eth0 just fine to ...
1
vote
0answers
29 views
Iptables configuration to allow Steam Client
I recently got and setup a small linux (Debian) router box. I'm adding it to an existing network to create a small subnet with specific properties, namely internet content filtering. I'm highjacking ...
1
vote
1answer
77 views
Can't connect to SSH over VPN when using 3G only
I'm having a bit of a strange problem that I'm not sure how to debug/fix. I have a Raspberry Pi connected to a Windows VPN via either a wired interface or 3G dongle. With the wired interface I can ...
0
votes
0answers
20 views
iptables dnat in lvs server ( tunnel mode) not work
I use LVS - tunnel mode, then i want use iptables to redirect the Destination port to LVS.
eg:
LVS-server( tunl0: 110.75.11.11), eth0:10.232.67.1
realserver ( eth0:10.232.67.2, tunl0: ...
0
votes
0answers
126 views
How does iptables masquerading allow to access a different local subnet?
My Linksys router (IP 192.168.1.1 inside a /24 subnet) is connected to my ADSL modem (IP 10.0.0.138 inside a /24 subnet) to establish an internet connection via PPPoE. To be able to access the modem's ...
1
vote
2answers
154 views
linux routing outbound port 80 traffic via ssh tunnel, iptables, or a simple route
I have two hosts, A and B. Host A hosts services on port 8080 and has outbound internet firewall rules allowing port 80 and 443 access to Host C.
Host B is on the same subnet as Host A. Host B is ...
0
votes
0answers
20 views
Can't access Citadel from outside
I'm trying to set up Citadel on a CentOS 6 VPS. I've installed and configured it and can browse to 127.0.0.1:2000 via lynx and see the login page, but I cannot access that same page via serverip:2000.
...
0
votes
1answer
46 views
using iptables to prevent RST related to a specific port
I have a program which uses libpcap to capture incoming TCP SYN packets, these SYN packets are destined for a specific port.
But I have no tcp listening socket for that port, so in practice, the OS ...
0
votes
0answers
31 views
Port preservation dd-wrt
I have a Netgear N600 router with dd-wrt firmware and am trying to connect to a black box on my network. The magic black box only supports a configuration where the source port is 2000 and destination ...
0
votes
3answers
58 views
iptables rules are not in action
I have a iptable rule file, on the INPUT chain I have
-A INPUT -i em1 -p tcp -m tcp --dport 54000 -j ACCEPT
-A INPUT -i em1 -p tcp -m tcp --dport 30000 -j ACCEPT
-A INPUT -i em1 -p udp -m udp --dport ...
-5
votes
0answers
21 views
Linux. iptables,squid [duplicate]
I have a public IP 183.82.4.xxx.
I have a router on which I have configured this IP.
Now using routers dynamic IP, I want to configure my Linux 5.0 firewall. On the same machine, Linux squid is also ...
1
vote
0answers
37 views
Advanced QoS on prioritized first packages set by ISP
I have the following problem my ISP (Fibertel from Argentina) accelerates, 'enhances' the first 6.8 megabytes of downstream transfer and it's seems the first 1.8 megabytes of upstream transfer.
This ...
0
votes
1answer
31 views
allow redirects with iptables
with the following rules, php can't make a redirect to another file. it's freezes at the point when it gets toheader("Content-type: video/x-flv");
header("Location:" . $VIDEO);
or ...
1
vote
2answers
207 views
IPtables Rules to Block IP Range
I've applied the following rules from a text file called "iptables.save" to iptables.
But to my dismay, I found that the ip address 107.22.26.176 is still able to access my server via TCP.
What did ...
0
votes
1answer
69 views
How to allow access to only specific IPs with Parallels VZ built-in firewall?
How can I use Parallels Virtuozzo's built-in firewall utility (called psa-firewall under the hood apparently actually psa-firewall seems to be a seperate Plesk interface - either way, it's basically a ...
0
votes
1answer
51 views
How can I add the port to iptables rules on centos?
I want to open the port 8040 on my centos, but I keep getting connection refused.
This is what I have done:
iptables -I INPUT -m state --state NEW -p tcp --dport 8040 -j ACCEPT
iptables -I INPUT -m ...
0
votes
2answers
72 views
Iptables: Allow Internal LAN to access INTERNET
I have an internal network behind my router on eth0, and I have my router connected to the internet thorugh wlan0. I can't access the internet from inside the lan, how can I fix this?
wlan0: ...
-1
votes
1answer
56 views
Configure IPTables [duplicate]
We have RHEL 5.0 squid proxy in our office.
Our LAN is 172.20.12.0 /24 n/w. Proxy ip is 172.20.12.4 /24 .
I want to share Internet through proxy.
Most importantly:
Suppose I have flushed the ...
-1
votes
1answer
93 views
LInux squid proxy
We have RHEL 5.0 squid proxy in our office.
Our LAN is 172.20.12.0 /24 n/w.
proxy ip is 172.20.12.4 /24 .
I want to share internet through proxy.
Most importantly:
I want to give full access to ...
1
vote
1answer
51 views
iptables status enabled after restart even after disabling
I am disabling iptables on Oracle Linux 6 with these commands.
setenforce 0
service iptables stop
service ip6tables stop
chkconfig—level 123456 iptables off
chkconfig—level 123456 ip6tables off
...
0
votes
1answer
66 views
UDP packet and firewall
I notice when I send udp packets from computer A to computer B,
B can receive the upd packets correctly
but if I send udp packets from computer B to computer A
the udp packets are not received
A and ...
0
votes
1answer
78 views
unable to connect to localhost:80 after installing nginx
I just installed nginx by doing sudo yum install nginx and I'm unable to connect to it on port 80.
I tried stopping iptables by doing sudo service iptables start and was still unable to connect.
I'm ...
1
vote
1answer
44 views
iptables simple forwarding setup woes
I have iptables running on a host (acting as a firewall) in a Linux namespace with only one network interface: h2-eth1 (has an IP and MAC address)
I have set up my switch to forward all packets to ...
0
votes
1answer
36 views
show interfaces in iptables -L
Is there a way to show the network interfaces via iptables -L in Ubuntu 12.04?
When I execute an iptables -L I get an output like this :
Chain INPUT (policy DROP)
target prot opt source ...
1
vote
1answer
60 views
Port-Forwarding for Click'n'Load remote usage
I've got JDownloader running on my HTPC and access it via VNC.
The problem with Click'n'Load (CNL) is, JD only listens on localhost:9666 for incoming traffic, and the browser applications only send ...
0
votes
0answers
78 views
Routing eth1 to ppp0 (PPTPD VPN)
I have some problems connecting a Playstation to my VPN via another PC.
Hardware: PC that should route incoming traffic from the Playstation to VPN: eth0 - connected to the internet eth1 - connected ...
2
votes
1answer
93 views
Linux iptables forward from ip1:port1 to ip2:port2
I connect thought tunnel to other machine like this:
ssh user@ip -L2000:192.168.64.88:80
So on my local machine I want to configure iptables that way like I have a "native" access to ...
2
votes
1answer
81 views
Restrict the number of http and https connections from a specified IP address to ten connections per minute
How I can restrict the number of http and https connections from a specified IP address to ten per minute usingiptables commands?
I’ve tried this but it is not working:
iptables -A INPUT -s ...
0
votes
0answers
192 views
OpenWrt: how to give wlan clients @ 10.x Internet access via gateway @ 192.168.1.254
I want to isolate guests connecting to my Wi-Fi to the 10.0.0.x subnet, while giving them Internet access. The OpenWrt router is at 192.168.1.48 ("wifi" interface has 10.0.0.1) and my gateway is at ...
2
votes
3answers
94 views
iptables - add rules not as root
One of our servers is being hit daily by a large number of spam bots. They're not able to post any spam, but they still try and end up slowing down the server for real users.
To counter this, I have ...
2
votes
2answers
168 views
How to send out some traffic via my vpn connection
I had a working setup where I could access all my work resources which are accessed via VPN going via my server previously however at some point recently this stopped working for no obvious reason.
...
0
votes
0answers
76 views
iptables blocking some icmp traffic
I have 2 nodes that check each other for health. Most of the ports checkout ok but there is an icmp packet that isn't passing the firewall. Ping works fine. Not sure what to make of it but if I ...
1
vote
2answers
68 views
How to test IP Tables Rule (Linux Ubuntu12.04)
I wanted to ask how to test IP Table Rules. For example, I have a port number and I want to be sure that it accepts all packets. How can I do it?
After I type iptables -L I see that the rule has been ...
0
votes
1answer
146 views
DD-WRT - Host-based forwarding
I would like to know if I can configure DD-WRT router, that operates as the server's network gateway, so support different forwards based on hostname (other than port 80).
I've configured ...
0
votes
0answers
39 views
How to be able to ping a subnet in a ipsec vpn?
This is supposed to be a pretty simple question but I couldn't google a answer for it!
I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has ...
3
votes
1answer
195 views
IP forwarding on the same network
I have a raspberry pi that I have put wifi on. I am also using its ethernet connection to bring internet to my XBox 360. I want to bridge these connections AND keep them both on the same network.
For ...
0
votes
0answers
83 views
Block brute-force on server with http auth behind cloudflare proxies
My server is behind Cloudflare proxies. I have configured simple http authentication to restrict access to some server resources. I'm trying to block brute-force attacks on http auth with fail2ban.
...
0
votes
0answers
58 views
IPTables masquerading stops working
In a classical SOHO setup I am running a Debian box as router/firewall. For an unknown time now I have an issue, where the MASQUERADING on the output connection (PPPoE) stops working for one of the ...
0
votes
1answer
67 views
Iptables: allow specific ips on specific port
I am trying to allow a few IPs on port 80 and disallow all other from access port 80.
Can someone suggest the iptables rules needed for this to occur?
1
vote
0answers
371 views
How do I configure DD-WRT to forward IPSec traffic to an internal server to support a road warrior configuration?
I use dd-wrt as my home router setup and that's been working fine. Now I wanted to figure out a way to be able to use my iPad to set up a IPSec tunnel to my home network while I'm on the road.
PPTP ...
