Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
0answers
25 views

accessing outside my network through a server

I have: A user-machine (embedded device where I can't log in to console or ssh) , that doesn't have access to lan 192.168.5.x B a server debian that sees the A's network , but is in 192.168.1.x ...
0
votes
0answers
12 views

Wifi hotspot, what's wrong with this redirection structure/code?

My linux machine provides a Wifi access point (made with hostapd package). Interface wlan0 is thus accessible by machines around. When clients webbrowses my machine, I would like any IP/url to be ...
0
votes
1answer
14 views

What is MASQUERADE made for?

A simple redirection is used on my server, with iptables rules : $ iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 13.37.42.1:80 $ iptables -t nat -A POSTROUTING -j ...
0
votes
2answers
38 views

ipTables, how to block all services requests on port 80 for an IP?

On a linux server/router, I want to block port 80 only for one IP (example : 1.2.3.4 ) I have been given this example : ### Block Incoming Port Requests (BLOCK PORT) # To block port 80 only for an ip ...
0
votes
0answers
9 views

Unhappy mixture: linux, tuntap, namespace,pppoe

I have created three namespace(ip netns), x, y z and a ip bridge called brig0. I am trying to route packets to the pppoe connection in namespace y. I want to know why tun0 says "no-carrier"? How can ...
0
votes
0answers
19 views

Connection interruptions on Debian router, possibly due to excessive duplicate ACKs?

I have a Debian server as a house router, which for a year has been working flawlessly. However, I recently moved and switched service providers from FiOS to Comcast, and possibly as a result am ...
1
vote
2answers
72 views

How to passthrough Wifi DNS and interenet access to DHCP client

I have a laptop that connects to wifi for internet access. This computer is running Linux (Fedora), and it is acting as a DHCP server for another (ubuntu linaro) computer that does not have a wifi ...
0
votes
0answers
11 views

OS X iptables owner equivalent OR use only vpn for specific user

I am trying to make sure all network traffic initiated by a specific user on OS X Yosemite will go through a specific vpn or otherwise be blocked. I imagine I could do that easily on linux using ...
1
vote
0answers
24 views

how to port forward to server + tunnel specific hosts route though openvpn client on tomato

Running Shibby Tomato v130 on an Asus RT-N66U. My goals are the following With Transmission running on the router have all torrent traffic route through an OpenVPN client also running on the ...
0
votes
2answers
22 views

Use iptables to block local connection

I wish to block all connections (local and remote) to a service running on a particular port, say port 1000. I have tried the following command: iptables -I INPUT 1 -p tcp --dport 9999 -j DROP ...
1
vote
0answers
14 views

502 bad gateway after putting up firewall nginx

My server was working, then I added a firewall for a bunch of ports! And now I get the error: 502 Bad Gateway nginx/1.4.6 (Ubuntu) Nginx server { listen 80; server_name 45.79.80.140; ...
2
votes
1answer
29 views

Program to block an IP temporarily with iptables

Is there a program on Debian to block an IP address temporarily just by launching a command (specifying the IP and the duration)? With iptables/ip6tables alone I can create a rule, but I would then ...
0
votes
0answers
5 views

iptables block access to all ports except 53 (tcp,udp) from one IP address

how can i block all ports from one IP address except the port 53 TCP,UDP? example: ip 192.168.0.15 access only port 53 (udp,tcp). thank you.
0
votes
0answers
16 views

Automated Wifi on Raspberry Pi

I have a NAT set up, that allows my devices to bypass the MAC filter in the local dormitory router. The setup works, but since my original "nat server" has died (the HDD got fried), I had to put my ...
7
votes
1answer
86 views

SSH to Vmware virtual machine with NAT network [duplicate]

right now I am able to ssh to host over internet and ssh from host to the virtual machine. What I want to do is ssh directly to the Guest machine from outside. I tried to do this using iptables: ...
0
votes
0answers
25 views

How To Configure Portforwarding with iptables

I have got a "Hypervisor" witch has two interfaces: eth0 Link encap:Ethernet Hardware Adresse d4:3d:7e:fc:b2:db inet Adresse:87.25.34.251 Bcast:87.25.34.255 Maske:255.255.255.192 ...
0
votes
0answers
15 views

DSCP to p bit mapping in Linux

Re posting from Networking forum as per suggestion Linux1--------------------------------------------Linux2 eth0 10.10.10.30 eth0 10.10.10.10 eth0.50 20.20.20.30 ...
0
votes
0answers
12 views

Bypassing VPN routes based on the destination port

I have a Raspbian machine connected to a VPN using OpenVPN. Without any configuration, all traffic goes through that VPN and I have no control over the VPN server. What I'm trying to achieve is ...
0
votes
2answers
44 views

How to set up iptables

I try to understand how iptables works but after a lot of hours and read a lot of articles i have stuck. That i want to do is DROP INPUT & FORWARD policy and open some ports. More specifically, i ...
0
votes
1answer
48 views

Iptables SNAT routing to openVZ containers

For this to make sense I need to set the scene a bit. I have a dedicated server with 5 public Ips : A.B.C.1 to A.B.C.5 A.B.C.1 manages the dedicated server itself, and A.B.C.2 - 5 are used for ...
3
votes
1answer
24 views

iptables on openwrt router: logging connections to a host from clients on the same subnet

I am trying to setup an auto wake-on-lan setup using my router that is running OpenWRT 14.07, Barrier Breaker. My idea is that the router monitors any connection attempts to the host I want to wake up ...
0
votes
1answer
26 views

Redirecting HTTP and HTTPS from LAN to a page with iptables

I'm using the iptables command on a router running Bananian Linux in order to redirect all incoming traffic to a small webserver which serves a 302 Redirect to a login page (also hosted on the ...
2
votes
1answer
31 views

A secure, iptables rule-set for Ubuntu home router

I am using a Ubuntu 14.04 server machine as my primary home router and firewall. It has DNS, DHCP and uses iptables to secure everything up. Iptables also acts as a nat. On eth0 I have my incoming ...
2
votes
0answers
20 views

Simulate SNMP Trap with SNAT

I have to test SNMP 2c Traps. I want to send those traps from some computer and the trap destination has iptables. So before the trap enters the NMS, I could just rewrite the real source of the trap ...
0
votes
0answers
21 views

DNS and transparent intercepting squid

I am building a transparent intercepting squid proxy in my home network. My network is 10.10.10.0/24 with a soho adsl router that is the DHCP server with a extra static route network addr 0.0.0.0 ...
2
votes
1answer
35 views

Does tcpdump bypass iptables?

I mistakenly setup open resolver DNS server, which was soon used for bunch of DDoS attacks originating somewhere from / to russia. For that reason I completely blocked port 53 on both DNS servers for ...
0
votes
0answers
19 views

Ubunbtu 12.04 iptables error after upgrading kernel to 3.4

I been using Ubuntu 12.04 for well 3 years and using it with kernel 3.2. I decided to upgrade to kernel 3.4 because some freezing problems starting to occur more and more. Well the update went well. ...
1
vote
2answers
42 views

OpenWRT: iptables rules will be deleted automatically

In my OpenWRT instance, I have added iptables rules in the Input filter table, but the problem is when I turn on my system I found that the rules are deleted. What can I do so that the rules are not ...
1
vote
0answers
16 views

Iptables: dropping/rejecting new and invalid connections

I'm very new to iptables and my goal is the block NEW and INVALID connections on the INCOMING chain and log any attempts for a NEW connection. I'm also letting any and all traffic out on the OUTGOING ...
2
votes
1answer
155 views

vpn, IP forwarding and nat

I have setup a Softether VPN on an Ubuntu 14.04 server in an aws network which has about a dozen servers using this guide. The only difference is that I have used SecureNat and softether DHCP. I can ...
0
votes
2answers
40 views

How can I block all outbound connections?

I need to block my server from initiating any connections to a remote server. However, I still want the server to be able to reply from connections initiated via clients connected. In other words, I ...
0
votes
0answers
8 views

Single iptables on openwrt

I have a router with a fresh openwrt install and local network 192.168.5.0/24. There is a server SERV on 192.168.5.100 (HTTP and some other services). There is also a pptp-client tunnel (visible on ...
0
votes
0answers
34 views

Can I use iptables to temporarily block FTPS (TLS) server brute-force attempts?

There are couple of similar questions like this (e.g. http://serverfault.com/questions/200539/can-i-use-iptables-rate-limiting-to-temporarily-block-ftp-server-brute-force-att) , but I have a slightly ...
0
votes
0answers
75 views

Cannot ping virtual host behind NAT port forwarding

I'm creating network between real Windows 8.1 (R) and two virtual Debian 8 (V1, V2) using VM Ware. V1 has running Tomcat and should have access only to V2 and R should redirect V2 to V1. I used two ...
2
votes
0answers
40 views

How do I block with specific string with IPTABLES?

Want to block this URL STRING with IPTABLES. Need to know specific command. "GET /affiliate/5/campaigns?api_key=duO5gVw3s0&affiliate_id=67647&format=json HTTP/1.0" 404 785 "-" "Dalvik/1.6.0 ...
0
votes
0answers
17 views

What is the best way to limit the IP addresses which can be access from within a docker container?

I have an answer which will limit docker containers to only be able to access a single IP address outside the host. Using this iptables rule on the host: iptables -I FORWARD -i docker0 ! -d 8.8.8.8 ...
0
votes
0answers
19 views

Routing application traffic through interface, not receiving replying trafic

I'm trying to set up a Plex Media Server on a Arch server. However most of the time the server is connect to a VPN and I want the Plex traffic to be routed outside of the VPN interface, tun0 and ...
1
vote
1answer
35 views

Ubuntu router setup guide iptables rules

I'm trying to figure out the meaning of the iptables rules in the Official Guide for Setting up a Ubuntu Router. For example, *nat. I can not find anywhere on the internet that has *nat for iptables. ...
1
vote
1answer
21 views

iptables: How to “override” a port redirect?

My setup is as follows: I have a Linux server with two interfaces, eth0 and eth1. eth1 has an Internet connection through my normal LAN. eth0 is serving DHCP and the interface itself has an IP ...
0
votes
0answers
32 views

Failover on voyage os using eth0 and ppp0 interfaces

Hi I am having problem for failover handling on voyage os. I have a system with eth0 and ppp0 interfaces where eth0 is primary and ppp0 is a secondary path for traffic. root@voyage:~# route -n ...
0
votes
0answers
18 views

Cannot access my port from other systems in same network

My machine is running in Red Hat Linux OS. I have setup a server using apache in port 8060. I am able to access in localhost but not is other systems for the same network. I am able to ping the ...
0
votes
0answers
18 views

Accessing Web UI with Spark1.3.1

I am currently building and deploying spark with standalone mode, including one master node and two worker nodes, on Google Container Cluster. For monitoring purpose (also connecting to master from ...
3
votes
1answer
74 views

Allow only one website using iptables in a linux router [duplicate]

I have a Linux server I'm using as a router for my internal network. I need to block all the websites except one or two using iptables. How can I set this up?
0
votes
1answer
24 views

Redirecting marked packets to Tun device

I have a small program that needs to do various things with a selection of packets, based on various iptable rules. The packets are MARKed this way: iptables -t mangle -d 10.10.0.0/16 -j MARK ...
0
votes
1answer
25 views

How to white list some ip and all the rest block while having already a DMZ?

I have a Linux machine running which has local ip: 192.168.1.2 connected to a router with public IP 8.8.8.8, now the router 8.8.8.8 has DMZ to 192.168.1.2 As a result spammers, hackers, crackers ...
0
votes
1answer
39 views

Samba ports still closed even with iptables rules flushed and disabled

I’m trying to install Samba on a server running CentOS 6 with WHM/cPanel, and I’m having some trouble with ports. This is a brand new system as of yesterday, and I haven’t yet started locking down ...
1
vote
0answers
31 views

Why do my nat iptables rules not work with marked packets?

System: debian squeeze, Linux server 2.6.32-5-amd64 #1 SMP Tue May 13 16:34:35 UTC 2014 x86_64 GNU/Linux, iptables v1.4.8 lsmod | grep iptable iptable_security 2176 0 iptable_mangle ...
-3
votes
1answer
34 views

about CentOS 7 apps & Driver [closed]

im using pc for several years but never tried Linux so im quite noob in this field. im using Autodesk maya, Nuke & will learn houdini very soon. i found that linux works faster for this apps so ...
0
votes
2answers
67 views

iptables subdomain port forward

Hello i know i can setup iptables to forward to an other ip when a port is given Example: user enters domain.com and it shows site other user types domain.com:28015 and it connects to a game server ...
0
votes
1answer
18 views

port forward in INPUT level

I want to change the destination port of the ipv6 packet in the INPUT level. So I tried to use ip6tables with nat in the INPUT level but seems this command does not work # ip6tables -t nat -I INPUT ...