Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
0answers
13 views

How to redirect all data through a proxy on Tomato?

My proxy is Squid as an external machine, my router is a WRT54GL with tomato, I can also install openwrt, but I prefer tomato. On the router, the firewall script I wrote this script, nicely connects ...
0
votes
0answers
8 views

How to IP redirect all requests to public ip back to router

Using OpenWrt Backfire 10.03.1 on Linksys WRT54GL. Till today my ISP's modem used to loopback all traffic with self-destination IP back to itself. (for example if my WAN IP is 8.8.8.8 and I perform ...
0
votes
1answer
15 views

Restricting access to iOS apps based on time of day

I'm looking to set up something on my iPhone and iPad that works like SelfControl on my Mac. I get distracted by Facebook, and would like to restrict my access to it except during certain times of ...
0
votes
1answer
41 views

IPTables Port Forwarding (OpenVPN)

From what I've heard, you can mark packets coming from a port and then redirect those packets through a different Network Route/NIC. What I'd like to achieve, is essentially a local proxy. For ...
0
votes
0answers
6 views

OpenWRT Firewarll INPUT Chain allowing everything?

I haven't done anything to my the default firewall rules except open a port for ssh from the wan and add the rules for OpenVPN as defined in this tutorial: ...
0
votes
0answers
15 views

Intermittent disconnections when using OpenVPN over SSH tunnel; possible iptables issue?

I've recently set up a Debian Wheezy server with OpenVPN to help out some friends in areas where internet censorship is a problem (including the blocking of VPN traffic in general). To overcome this, ...
0
votes
1answer
23 views

Port Forwarding with the real IP-address

How to implement port forwarding, so that would be displayed on the host real IP and non-IP machine, as it comes with SNAT DNET with IPTABLES The scheme is about the The machine-HETE with IP ...
0
votes
1answer
12 views

CentOS - ipTables

I have some questions about ipTables. Is it possible to open all ports between 2000 and 6000 and then have 2245, 5435,5434 closed? Is it possible to open some ports from a ip address? Eg. The only ...
0
votes
0answers
54 views

CentOS 7.x iptables

I have manually edited the /etc/sysconfig/iptables file in my CentOs 7.x installation , I have two entries and two processes running at the respective ports. I am able to telnet/access port 2181 but ...
0
votes
0answers
14 views

Why won't my proxy server connect to the internet?

I'm setting up a dedicated machine to run a transparent proxy server for my network, but for unknown reasons, clients can connect to the machine, but the internet isn't working. There seems to be a ...
0
votes
1answer
32 views

Need help converting some linux commands to OSX

I want to convert some linux commands into OSX. (Mavericks 10.9.4) root@bt:/# /etc/init.d/apache2 start (will "sudo apachectl start" do the same?) root@bt:/# echo “some Site Goes Here!” > ...
0
votes
1answer
24 views

squid proxy slow response

We are using the squid proxy in our setup and implemented as transparent proxy with user authentication. Before couple of days, while we are trying to setup the iptables the squid started performing ...
0
votes
0answers
17 views

How to correctly configure iptables on a laptop?

I have run these commands (tried switching the order too) because I want to set up a firewall on my laptop so that nobody can connect to it (except of course in response to a connection I've made): ...
0
votes
1answer
43 views

Why doesn't SpeedTest.net Upload work in Windows when using a Debian-router?

There is a FTTx connection. I connect ISP cable to the WindowsXP pc, setup PPPoE. SpeedTest.net shows normal Upload / Download. Now I connect ISP cable to router with Debian 7.5 installed, set up ...
0
votes
0answers
37 views

udp client sending ICMP “port unreachable” when receiveing messages from the server

(Note: I moved this question from StackOverflow, because it's to be considered off-topic there, better fits here, and still unsolved) I have a udp client using luasocket, basically doing this (with a ...
1
vote
1answer
31 views

Should my server ever need to directly communicate with the NAT gateway?

What I mean by ``directly communicate'' Does it ever need to receive packets with the gateway's IP address as the source IP address, or send packets with the gateway's IP address as the destination ...
0
votes
0answers
8 views

Redirect external request thru VPN

I'm using Centos 5.4 and I'm trying to use the XMPP outside the company. But, the XMPP only works with the VPN. VPN connects and the XMPP become 10.0.2.49:5222 I tried to use iptables using this: ...
0
votes
0answers
13 views

iptables configuration on Windows Azure (CentOS 6.5) for endpoint load-balanced set

I created 2 VMs (CentOS6.5) on Windows Azure for Postgresql database and HA cluster, everything works fine except when I set iptables service on, the endpoint load-balanced set is down. for security ...
1
vote
3answers
20 views

Firewall init script

On Debian, what is the best way to start an iptables firewall script : /etc/init.d/firewall_script.sh in /etc/network/interfaces, add post-up /etc/network/if-up.d/firewall_script.sh Do you check ...
0
votes
0answers
19 views

Openvpn iroute traffic to internal network

I have a simple scenario like follows : 3 openvpn clients and an openvpn server , openvpn clients are (C1 , C2 and C3 ) openvpn server is (S1) behind the 3 clients ( C1 a network of 192.168.1.0/24) ...
-1
votes
2answers
29 views

mirroring traffic with iptables doesn't work

i want to mirror specific traffic to ip 192.168.200.1 i use this solution : Mirror Port via iptables but when i enter following command, error occurs: iptables –I PREROUTING -t mangle -j ROUTE --gw ...
2
votes
1answer
25 views

IPSet with IP6Tables ERROR

Can someone please solve my headache and tell me how to fix this? [**@*.* ~]# ip6tables -I INPUT -m set --match-set blacklist6 src -J DROP ip6tables v1.4.7: Couldn't load match ...
0
votes
0answers
10 views

rails ssl setup on Amazon EC2

Environment Amazon EC2 CentOS Rails 4.0.4 SSL certificates installed Chef My Rails config In my environment .rb (staging.rb and production.rb) I added this config.force_ssl = true Started ...
1
vote
1answer
36 views

Iptables rules to only whitelist SIP providers

I have an Asterisk box sitting behind an ADSL router/modem. There are no other services on the Asterisk box, just telephony. I am getting a lot of traffic which I think are SIP probes. I've ...
0
votes
0answers
35 views

Allow internet access to intranet only users using Nginx on Ubuntu

I need to allow some users who only have access to the intranet to access one specific internet site. I'm doing this by using Nginx as a reverse proxy. To test this, I would like to block all internet ...
0
votes
0answers
21 views

How do I “socksify” IPv6 TCP connections?

For IPv4, one can use REDIRECT iptables target and redsocks/tcpsocks. How to do the same for IPv6? I've tried ip6tables -t mangle -A PREROUTING -d 2600:: -p tcp --dport 80 -j TPROXY --on-port 4455, ...
0
votes
1answer
30 views

Redirect ports with iptables

I need to do redirect port 443 on all interfaces to 8080 on one interface using iptables on a box with 2 NICs. I also need to block pretty much anything else on those interfaces. Here is my iptables ...
2
votes
0answers
49 views

Block all outgoing traffic for a User running Wine apps

Good day, I'm using a lot of WINE apps under Linux which work just fine, but one thing I am specifically looking for right now is to block their access to the internet (outgoing), with exception of ...
0
votes
1answer
31 views

block network access to a domain (ubuntu)

I have a few ubuntu servers in various geographies. I want to block all outgoing connections from all ubuntu machines (all processes) to several domains, e.g. www.server.com. I know iptables can block ...
0
votes
3answers
30 views

outgoing ssh fails from only one machine on lan to outside network

I have multiple servers in my LAN (which I'll refer to as Box1), and they are all able to make outgoing SSH connections, except one that stopped recently, which I'll refer to as Box2 (actually, I'm ...
0
votes
2answers
41 views

Wifi sharing over eth0

There are a lot of tutorials how to share network connection with your usb wifi adapter and I tried lots of them but it is still not working. Can you please help me with my problem. Here is my network ...
0
votes
0answers
33 views

iptables error “FIX ME! implement getprotobyname() bionic/libc/bionic/stubs.c”

When I do this rule, the error shows up iptables -A INPUT -p tcp -m tcp -m multiport ! --dports 80,443 -j DROP I've also found some solutions. getprotobyname() just converts protocol names like tcp ...
0
votes
1answer
20 views

Cant connect to eth0 after wlan0 sharing with iptables

I wanted my Ubuntu server to act as a wifi hotspot. So I set up hostapd to allow wifi connections. I then setup dnsmasq to provide the DHCP settings. I then added the following iptables rules, so ...
0
votes
1answer
54 views

OpenWRT and iptables: redirect all traffic from ip1 to ip2

I'm aware of other questions with the same topic, but I couldn't get it to work. I'd like to forward inside my local network all traffic from ip1 to ip2. Only from inside the network, no outside. I ...
1
vote
3answers
94 views

How to block all ports except 80,443 with iptables? [duplicate]

Blocking all ports(in and out) is easy but it's hard with the word "except". I don't know any rules that satisfies the condition. PS: I know this question is nothing new. But in fact, I didn't find ...
0
votes
0answers
54 views

Route incoming traffic from VPN Clients through localhost-proxy on VPN server?

I’m still quite a newbie to Linux in general and I want to learn by establishing useful projects. My actual project is for a vpn-server to get rid of ads, cookies etc. for all clients. Meaning: No ...
1
vote
2answers
182 views

Limit incoming connections using iptables per IP

I need to limit access to some port per IP. Let's say 5 connections per minute - not more. I've seen iptables recent, connlimit and limit, but all of them are not fitting exactly what I need. ...
1
vote
5answers
69 views

How to forward traffic using iptables rules?

I am new to iptables and I have been doing Google searches for a few days now without finding a good solution to this problem. I have computer A with a public ip address (say 192.0.2.1) that can ...
0
votes
1answer
53 views

Asterisk server firewall script allows 2-way audio from incoming calls, but not on outgoing?

I'm running an Asterisk PBX on a virtual machine directly connected to the Internet and I really want to prevent script kiddies, l33t h4x0rz and actual hackers access to my server. The basic way I ...
0
votes
1answer
74 views

Equivalent iptables command on OS X 10.9

I want to redirect the tcp traffic temporarily to a custom port. On Linux, I use the following command: iptables -t nat -A OUTPUT -p tcp --dport 1935 -m owner \! --uid-owner root -j REDIRECT and to ...
1
vote
1answer
26 views

Add IPtables rule by script at the request of another computer

I wonder, is it possible to make an script, which adds rule in iptables by request from other pc? I mean, script "knows" what to do, but addres for rule comes from request. And how do you think it ...
0
votes
1answer
86 views

Block All Traffic and Allow from Defined IP only in IPTABLES

I want to create a gateway firewall for my network . I want to block all the internal traffic on gateway and allow it from two computers only . On gateway --> eth0 is network card in gateway PC ...
1
vote
1answer
34 views

Bitbucket SSH and iptables

I'm a newbie in iptables to be honest. I have some basic rules. Everything is blocked by default. iptables -t filter -F iptables -t filter -X iptables -t filter -P INPUT DROP iptables -t filter -P ...
0
votes
1answer
76 views

Iptables mark incoming packet - vpn routing

I have connected my home to my workplace for out of house backup reasons through OpenVPN. The connection is working nicely. At work I have 5 fixed IP addresses. Now I would like to assign one of ...
1
vote
1answer
72 views

Combination of NAT, DHCP, and OpenVPN on lubuntu 14.04

Okay, so I've got a set up, where eth0 my internal IP address (192.168.1.3) it has been configured as my default gateway using the iptables this sudo sysctl -w net.ipv4.ip_forward=1 sudo ...
0
votes
1answer
33 views

iptables: Is it dangerous to filter by source port?

I would like to run a stateless firewall setup and I currently have the following rules: #Do not track any packet *raw :PREROUTING ACCEPT [0:0] -A PREROUTING -j NOTRACK COMMIT #Actual firewall rules ...
0
votes
0answers
124 views

Routing inside Virtualbox Linux Guest on Windows Host connected to WiFI

How can I route a whole net traffic from a laptop (192.168.1.100) connected via WiFi to a router (192.168.1.1) to which I don't have access and cannot mofidy routing table, to other host in this same ...
0
votes
1answer
44 views

IPTables and PPTPd

I'm trying to add the line -A POSTROUTING -i ppp0 -j MASQUERADE to my IPTables in order to allow VPN to have access to the entire internal and external network (eth0, and eth1), but when I try to ...
0
votes
0answers
26 views

I want to exclude the port xxxx from my iptable rule

I want Transmission to use the vpn (tun0) for the torrent stuff, but I also want to access the web interface from my local network. Any suggestions? For the first part, I already tried this.
0
votes
1answer
64 views

iptables --append FORWARD required for routing between NIC alias IPs?

I have an ubuntu box with a single NIC. In order to bind a number of services (like apache, dnsmasq, etc), I have bound them to different alias's (e.g. eth0:0, etc), some of which are on completely ...