Tagged Questions

Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

1
vote
1answer
11 views

Block traffic to LAN but allow traffic to Internet (iptables)

On my home network I am setting up a CentOS server that will be used by about a dozen or so for educational purposes - e.g. learn how to use the Linux shell and host websites, among other things. I ...
0
votes
1answer
20 views

About network traffic control

I have a satellite internet connection -> a pretty nice 8 processor server with 64gb of ram, running debian 7.7, two lan ports, one connected to the gateway, the other to the wifi router, wifi to all ...
0
votes
0answers
28 views

Map remote host to local ip (linux)

How can I map remote host to local ip? For example: If I map google.com to ip 192.168.1.15 so when i ping 192.168.1.15 i get forwarded response from google.com Maybe Iptables or something?
0
votes
0answers
13 views

Connections from virtual host to internet OK, but to rest of LAN, broken

In a notebook running Ubuntu 14.04 I have installed VirtualBox and created a virtual server with Windows 7. The PC is connected to a 192.168.x.y LAN. The virtual server is in a host-only network with ...
0
votes
1answer
21 views

Config to make only pcap receive packet

I am trying to use pcap to modify the packet before sending it out. For example, I have a server (running Ubuntu) listening on port 8000. Before it sends out SYN-ACK for incoming SYN packet, I am ...
0
votes
0answers
35 views

iptables snat does not change source IP

I am on ubuntu (with IP 10.0.0.1) trying to snat packets going out from port 9090. I want to change the source IP to 10.0.0.2 I have added the following rule through iptables: # iptables -t nat -A ...
1
vote
1answer
20 views

Debian 7 - iptables 'filter' not supported?

Am attempting to forward/ masquerade connections from WLAN0 to ETH0 as follows: sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --state ...
0
votes
0answers
16 views

Packets are delivered to the host, which has the (dst) IP, but the application bound to the IP/port never see the packets

I have an iMac and a dd-wrt router. On the Mac side of things I have a proxy executable that I wish to use, but I've been unable to figure out how to make pf forward packets to the same host. ...
0
votes
1answer
40 views

IpTables -j REJECT to instantly block the loading on user browser

I have been searching for a solution to notify the browser on user that the request is Rejected so stop loading it. Because I have blocked facebook and every page that have a facebook plugin is ...
0
votes
0answers
28 views

Cannot SSH on machine behind NAT. DD-WRT router

I'm trying to remote access my home Debian from my other office. The home Debian is behind a DD-WRT router, connected from a ADSL modem (Yeh, it's dynamic IP but I have someone to tell me the WAN ...
1
vote
3answers
56 views

How to block network traffic on ubuntu gateway via arp table

I have a network with 80 PC and a ubuntu 12.04 as GW. For security reason I want to limit the Computers connected on this network using an ARP precompiled table. In other words I want a tool that ...
-2
votes
0answers
11 views

iptables Rules gets reseted after Reboot@Ubuntu Server

I made a entry in blockfacebook table to DROP 173.252.74.0/18. Now, I tried to remove it using iptables -D blockfacebook 8 (173.252.74.0 is in the 8th line) and then I viewed the iptables ...
0
votes
0answers
35 views

Routing specific port ranges to specific gateway on Asus AC68 router using iptables and ip route

Linux noob here. I was hoping someone could help me with configuring some routing rules on my router, an Asus AC68. The router is connected to two gateways, wan0_gateway and wan1_gateway. I have ...
0
votes
0answers
25 views

Why is the TCP open but not the UDP?

I'm setting up a game server and I have a bunch of ports forwarded already (all in use). So I'm putting one into /etc/ppp/firewall-masq, which is full of iptables rules. The game server is served by a ...
0
votes
1answer
18 views

IPTABLES NAT port forwarding

I'm trying to setup a Linux box to act as a very simple 2 NIC router. I've read over the instructions on the bot Archlinux and Gentoo wikis and gotten the same result, masquerading works but not port ...
1
vote
0answers
24 views

Preserve NAT mappings across reboot

My Linux router is able to reboot and reconnect all network interfaces pretty fast (~10 seconds, thanks to systemd and a SSD disk), and comes up with the same IP addresses. Unfortunately the reboot ...
1
vote
1answer
22 views

Trouble with last DROP rule in iptables

Let's say I want four ports to be opened for any incoming packets so I made this ruleset: #> iptables -L -v Chain INPUT (policy ACCEPT 20 packets, 1190 bytes) pkts bytes target prot opt in ...
0
votes
0answers
22 views

iptables do not block all traffic i want to mysql port

Need to block all incoming traffic to port 3306 but two ranges. The thing is I can connect from other ranges anyway!. Think my drop rule is ok. Why is this? ]# iptables-save # Generated by ...
0
votes
0answers
5 views

Port bridge with iptables

is there a way to achieve the same thing than bidirectional socat functionality with nc mkfifo backpipe nc localhost 42042 0<backpipe | nc localhost 1042 1>backpipe But only by using iptables ...
1
vote
1answer
50 views

Make application use specific network interface

I have an openvpn connection and I need it to work only for one application, this app uses an specific local port. I used route-nopull on my openvpn config file and then: ip route add default via ...
1
vote
1answer
17 views

Filtered port with virtual server setup on a NAT

I have a Symphony SY602 ADSL router and I want configure a dynamic DNS to access my system remotely. I made a NAT virtual server in routers configuration and this is what I configured: Server Name ...
0
votes
1answer
18 views

enable internet on openvpn tun - azure linux

I am trying to do this with OpenVPN TUN on an Azure Linux instance: -=Android Client=- --> -=VPS=- --> -=Internet=- Client connects but no internet access. Iptables commands iptables -t nat ...
0
votes
0answers
12 views

Linux: Can user applications generate icmp messages?

I am using TOR and setting up a transparant proxy depending on users. I had trouble to constrain ICMP messages on UID. But I found an explanation for that on server fault. For the sake of privacy: is ...
0
votes
1answer
20 views

Why does iptables port aliasing work with only a single rule?

I have a service running on a particular port, but in order to make it accessible via a more memorable port as well as the normal port, I added an iptables rule that acts as a port alias: iptables -A ...
0
votes
0answers
24 views

Open firewall port on Mac OS X

I need to open port 8181 on my Mac OS X. On Linux, I would do: iptables -t filter -A INPUT -p tcp --dport 1664 -j ACCEPT iptables -t filter -A OUTPUT -p tcp --dport 1664 -j ACCEPT How do I do this ...
0
votes
1answer
15 views

Can't connect to Monet DB hosted in RHEL5

I'm not a sysadmin, much less a RHEL sysadmin, but for some reason I have to make a few config changes in a couple RHEL servers. I have to set up a couple services in different RHEL servers and they ...
0
votes
0answers
12 views

How to forward DHCP broadcast messages between two interfaces using ebtables?

I have two interfaces, WLAN and LAN, on my linux system. How can I "forward" DHCP broadcast messages received on WLAN to LAN using ebtalbes?
0
votes
0answers
24 views

How can I configure one of the ubuntu desktops as “dhcp-relay-agent”?

I have two Ubuntu desktops U1 and U2. U1 is connected to a DHCP server using wireless LAN and U2 is connected to U1 using LAN cable. How can I configure U1 as a dhcp-relay-agent so that U2 can also ...
0
votes
0answers
8 views

MASQUERADING a veth

I want to bind an application to a wifi interface that might loose connection and receive a new DHCPed IP on reconnect. The problem is that the application can only be binded to an IP address and not ...
0
votes
0answers
22 views

How do I share my wlan0 internet connection to eth0 using command line and config files?

I understand how it is done using the GUI (1, 2, 3), but I need to do this manually using Linux tools/commands (iptables, eatables ...). What are the configuration steps and commands to use, ...
0
votes
0answers
16 views

Why am I getting “FATAL: Ident authentication failed for user ”root“” after changing rails server to port 81

I was running my rails app on the default port of 3000. I opened port 300 with: sudo iptables -A OUTPUT -o eth0 -p tcp --sport 3000 -m state --state ESTABLISHED -j ACCEPT and sudo iptables -A ...
0
votes
0answers
4 views

SSH tunnel data from hostapd server to remote server

I've set up a small raspberry pi with hostapd to be a wireless access point. I'd like to have all connections from it ssh tunneled to a server in another country. I'm not overly sure how I'd do this, ...
0
votes
0answers
34 views

Route all packets on port 80 from inside a vm to kali linux on another vm

I'm trying to route all packets on port 80 to kali linux so that I can ssl strip them but I cannot see to setup the iptables correctly to force all the packets to go to my other Vm. [ Virtual Machine ...
0
votes
1answer
27 views

iptables on debian blocking git pull, http api requests etc

I am using IPTables on an API server to block all incoming traffic except for SSH, HTTP and HTTPS. I need to have full access on the loopback interface to run beanstalkd amongst other things, and need ...
1
vote
1answer
70 views

How to force Google safesearch on entire network

I've a problem filtering web searches on Google domains. Currently I've a linux openVPN Server running with openDNS "family block". I can block a lot of websites with dangerous content and it's ok. ...
0
votes
1answer
48 views

Why my iptables configuration for port-knocking does not work?

I implemented the following iptables rules on my test server for a course. The firewall shuts down and I cannot access port 22. However, after knocking on the ports 1111, 2222 and 3333 in that order - ...
0
votes
0answers
156 views

OpenVPN won't connect from remote location

I set up OpenVPN on a linux machine in my basement. I'm able to connect from my Windows 8.1 machine without an issue when I'm connected to the local network. In this instance, I set the config file ...
0
votes
0answers
13 views

iptable definitions for routing and defence

I'm attempting to configure a firewall on my laptop that allows for routing. The main trick is, I don't want to allow for connections to be made that do not fall under the ESTABLISHED,RELATED ...
0
votes
0answers
32 views

Port mirroring without TEE

I have a home router running OpenWRT 12.09.1. The package list for this version does not have iptables-mod-tee. I am familiar that I could set up a port mirroring using: #-A POSTROUTING -t mangle -o ...
0
votes
1answer
21 views

Trying to configure iptables on Slackware 10

I am trying to configure iptables on a Slackware 10 machine. This Slackware version is required in my class - so I cannot upgrade it. After compiling it, I want to configure iptables - however, it ...
0
votes
1answer
54 views

Conntrack gets incorrect forwarding rules for outgoing protocol 41

I'm trying to forward protocol 41 (ipv6-in-ipv4) for an HE tunnel through a WRT54G running Tomato 1.28. Tomato 1.28 is running a 2.4 kernel that knows absolutely nothing about protocol 41, except that ...
1
vote
1answer
107 views

allow incoming ssh with openvpn client

I have set up an OpenVPN client on my home router. The moment the tunnel goes up, I can no longer ping my router from the internet using its WAN_IP. I would like to allow certain incoming connections ...
0
votes
1answer
50 views

Using IPtables to redirect IP address range to port range

I'm trying to set up an IPtables rule that will forward all packets to a /22 range to a single IP and port for debugging purposes. Based on the question here Using iptables to redirect ip address I ...
0
votes
0answers
28 views

Becoming a VPN router in Arch Linux

I want to be able to set my computer as the router (or "default gateway") on any device on my network and have it go through my VPN, eliminating the need for a VPN client on that device. I do echo 1 ...
1
vote
0answers
28 views

How can I efficiently filter Dos packets? [duplicate]

I have recently been the victim of some Dos attacks. The facts : I received a very high amount of packets saturating my connection and preventing me from accessing the Internet during one hour ...
0
votes
1answer
53 views

Iptables to forward HTTPS traffic to remote HTTPS proxy

My goal is to use Iptables to take all traffic going to my server on port 443 and forward it to a remote HTTPS proxy server. So basically if I was to use my ip of 192.168.1.142:443 as a SSL proxy it ...
0
votes
0answers
25 views

Open ports for Age of empires in ubuntu router using iptables

The purpose of this question is to learn how to correctly use iptables. As I am currently living in the dormitories in the University and I am using a small netbook as a router to provide wifi in my ...
0
votes
0answers
22 views

Special type of DMZ?

So I have a standard modem-router setup all great to go, my Modem gives an IP Address from my provider via DHCP according to my Mac address. All is good. However, I now want to expose a new virtual ...
0
votes
1answer
27 views

Set block time with iptables

I have the following rules in ufw, for iptables: -A ufw-user-input -p tcp --dport 80 -m state --state NEW -m recent --set -A ufw-user-input -p tcp --dport 80 -m state --state NEW -m recent --update ...
0
votes
1answer
50 views

Will an inbound iptables rule in ddwrt on port 443 break https?

I want to run a vnc repeater service on my home ddwrt router. Due to the possibility of friends/family asking for support in unknown network environments, I'd like the host-repeater application to run ...