Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

2
votes
2answers
45 views

bridge does not forwarding packets centos

I am using CentOS 6.5 64 and use xen to create a virtual machine (CentOS) ifconfig [root@CentOS ~]# ifconfig eth0 Link encap:Ethernet HWaddr 08:00:27:54:B3:FA inet6 addr: ...
1
vote
0answers
4 views

Conntrack/NAT's port mapping for a specific port breaks whenever that port's service is shutdown for too long. How can I fix this?

Linux Gentoo 3.13.6-hardened-r3 #1 SMP Sat Apr 12 09:17:25 EDT 2014 x86_64 Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz GenuineIntel GNU/Linux hardened with grsecurity and selinux with a strict policy in ...
0
votes
1answer
10 views

How to specify a certain device to access the Internet via the OpenVPN client of router?

Involved Devices: a VPS, a router, and several devices that connected to the router. Final Aim: Base on the OpenVPN client which has connected to the server on the VPS, specify only one local device ...
0
votes
0answers
27 views

Iptables deny access to a specific IP address not working

I'm not able to deny access to a specific IP address or deny access to a specific IP address range as well. My network environment is, I have one router which IP is (30.30.10.1) and second my hotspot ...
0
votes
1answer
25 views

Route internet traffic from openvpn tun0 to eth0

I can't figure it out. How do I give chosen VPN-users access to internet trough eth0? All server traffic goes trough eth1. The eth0 is only supposed to give VPN-users internet access on chosen ports ...
1
vote
2answers
27 views

Apache runs locally but can't be accessed from other machine

I'm running Apache 2.2.3 in a VM for a test environment on CentOS 5. Apache is running and responding to requests on the VM itself. If I run "lynx localhost" on the VM I do get my test page. When I ...
0
votes
0answers
32 views

configure iptables to block all(as much as possible) bittorrent traffic

good day all This is my current iptables setup Generated by iptables-save v1.4.7 on Wed Apr 9 13:50:31 2014 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :LOGDROP - ...
0
votes
0answers
17 views

Segregating/Separating a device (ATT 3G Microcell) from internal network without using DMZ

I would like to put the ATT 3G Microcell in an isolated network from a network that has the rest of my devices, by which I mean I want the ATT 3G Microcell to only be able to access the Internet, but ...
0
votes
1answer
28 views

IPtables preventing outgoing packets

I am trying to setup firewall rules on a RHEL webserver, so that my webserver can serve up web pages and at the same time download remote files using curl/wget. Problem I am experiencing is I can only ...
0
votes
0answers
21 views

Display port numbers and port names

How do I display both port numbers and port names at the same time? I can display the forward port numbers (i.e. 22, 25, 1000, 443, 80) using the following: [root@michaels ~]# iptables -L -n Chain ...
0
votes
1answer
45 views

Routing internal traffic in centos to the internet using iptables

Hello friends i am struck in routing traffic from the office to internet i have a network structure like this http://asthana.me/images/ip.png I have assigned static ip to the cent os server(which ...
-1
votes
1answer
39 views

Bind incoming packets to 1 interface and outgoing packets to 2nd interface?

I am have a Linux machine with 2 network interface cards, I need to use one for incoming packets, other for outgoing packets.
0
votes
1answer
24 views

Turning iptables off on development server permanently?

What would be the downsides of turning off iptables permanently on a development environment? I don't like the fact that every time I restart virtual box I must do: service iptables stop service ...
0
votes
0answers
19 views

How to allow squid to grant access for outlook

I have configured squid at RedHat Linux 5.4 and all my Windows networks use 192.168.5.100 and port 3128 as proxy for accessing Internet. But while sending and receiving emails at Microsoft outlook ...
1
vote
0answers
23 views

How to forward ports through ssh and nat to another machine

I have a problem when using ssh port forwarding and nat simoultaneously. Situation: Machine A runs a webserver on port 8080 Machine B is a raspberry pi which works like a little router. It has two ...
0
votes
0answers
77 views

Chromecast and accessing Netflix from outside the US

I have given this as an answer, but there is a question involved so that's why I'll post this again. You can find the answer here: http://superuser.com/a/734838/311358 I have a computer (iMac) that ...
0
votes
1answer
17 views

Connected to vpn but can't connect to internet

I am using ubuntu 12.10 as a vps. And I am trying to configure a vps server on it. I can connect to the vpn but just can't get internet access. Maybe because I don't know how to write a iptables. ...
0
votes
0answers
12 views

Blocking an outbound port for a bridge'd nat'd inteface

eth0 and wlan0 are bridged to br0, and have access to the outside world through eth1 and NAT. I'd like to block an outbound port on wlan0, but leave it open for eth0.
0
votes
1answer
26 views

packages from router dont match iptables dnat rule

I have the follow rules to forward port 443 from external to a internal host: IF_INET=ppp0 IF_INET_IP=1.2.3.4 # Router External IP IF_LAN_IP=192.168.0.1 # Router Internal IP ...
0
votes
0answers
33 views

How to stream WiFi cameras over a Linux gateway to my laptop using iptables?

My setup is as follows: Linux gateway has one WLAN configured as WiFi client (192.168.0.100) to a Linksys WiFi AP(192.168.0.1). There are three WiFi cameras connected as WiFi clients (192.168.0.101, ...
0
votes
0answers
12 views

Can't SSH into a computer that is connected to a VPN

I set up a linux machine with an ssh server that I can connect to from an external network. When I have the server computer use a private VPN though, I can't ssh into it remotely anymore. Is there ...
0
votes
0answers
6 views

Setting/clearing packet's TCP flags with iptables

I know iptables can match packets with certain TCP flags using --tcp-flags. But how do I set or clear some flags on a matched IPv4 packet?
1
vote
0answers
51 views

Synergy client won't connect, despite open port?

I want to use a Debian KDE desktop computer (network name bradbury) as the server, and a Windows 7 laptop (network name Clarke) as the client. I have used this setup before without problems, but then ...
0
votes
1answer
25 views

Editing IPTABLES nat rule in cron job

I am sitting here with an issue: I need to switch the source interface for iptables' NAT rule at a given time. I want to basically do soemthing like this - caution: concept code: #!/bin/bash if [ it ...
1
vote
1answer
57 views

Unable to ping server

I have a Linux server that seems to have lost the ability to respond to a ping.. I recently installed Nagios on another system and need to have this Ubuntu server answer up to a ping.. I'm using ...
0
votes
0answers
14 views

Determine if an uplink interface is usable

I have a firewall system that is served by two uplinks to different ISPs. I'm using shorewall to manage the firewall; it load-balances traffic over both interfaces with connection tracking. All that ...
0
votes
0answers
35 views

iptables not forwarding vbox traffic

I have a vbox vm that i would like to give unfettered internet access to, and i have found instructions on how to properly forward traffic using iptables, as well as the recommendation that the vm ...
0
votes
1answer
26 views

why iptables is accepting all in INPUT?

As we can see in this, which is the default iptables on fedora 20 $ iptables -L INPUT --line-number Chain INPUT (policy ACCEPT) num target prot opt source destination 1 ...
0
votes
0answers
23 views

A more complex iptables rule

I want to make a script that sees if a number of connection attempts are made from one or more IPs ($CT_MULTIPLE_IP_THRESHOLD) in an ammount of time ($CT_TIME). If this happens, than in that ammount ...
1
vote
1answer
30 views

How to transparently tunnel a port from IPv4 to a remote IPv6 device?

At home, I am connected with an IPv6 address and additionally, my provider provides a NAT-like setup through which I receive a public IPv4 address that I share with other customers (the reason being ...
0
votes
1answer
66 views

What does this iptables rule mean: tcp flags:0x06/0x02 TCPMSS clamp to PMTU?

What does this iptables rule mean: tcp flags:0x06/0x02 TCPMSS clamp to PMTU? Doing iptables -vnL on my DD-WRT router shows the following rule in the FORWARD chain: TCPMSS tcp -- * * 0.0.0.0/0 ...
0
votes
1answer
60 views

How to create a local-remote-local tunnel to a specific port using ssh

I'm able to establish an ssh connection from my windows computer (localhost - eth1) to my linux computer (remotehost - eth0) by doing: ssh user@192.168.1.100 Intead of using that, because I use ...
0
votes
2answers
56 views

Is Iptables blocking outgoing ssh connections?

I have been trying to do pulls from github and it keeps hanging. My iptables rules have no rules which block outgoing traffic but I cannot connect to github using either ssh or http. I can't even ...
0
votes
0answers
70 views

Access to a NATed LAN Network without public ip address using VPN and Apache Virtual Host

my question is: I need to access from the outside to a DVR that in my LAN has the local ip: 192.168.1.x I have multiple LANs located in 3 different places not connected each other at the moment. I am ...
0
votes
0answers
93 views

Why does iptables suddenly stop properly forwarding packets?

My home network consists of a desktop PC running Slackware 64 [192.168.1.10]. My Windows PC [192.168.1.20] is routed through the Slackware PC via a direct ethernet connection. In addition to iptables, ...
1
vote
1answer
35 views

Forwarding all traffic to other server with iptables

Assume I have a sever with X.X.X.X IP address and a web server with Y.Y.Y.Y IP address. How would I forward web traffic from X.X.X.X to Y.Y.Y.Y using iptables? My servers run Linux and use iptables
1
vote
1answer
19 views

When writing an iptables save file by hand, how does one calculate the packet-counter and byte-counter values?

I am attempting to write a 22MB iptables rule-set file, the very kind that is generated with the iptables-save command, except endlessly long. Understandably, this takes a prohibitive amount of time. ...
0
votes
1answer
63 views

IPTABLES forward all ports except ssh

I have nat and packet routing working just fine, but I'd like to forward all ports except SSH to a static ip(192.168.0.3) What would be the correct iptables syntax to do this?
0
votes
1answer
122 views

Forwarding all incoming traffic on eth0 to go to eth1

I am trying to setup my raspberry pi to sit between my router and my modem. I'm basically trying to set it up as an intercepting proxy so that all web traffic goes through the proxy. I have the ...
2
votes
0answers
257 views

Route outgoing VPN traffic through local transparent proxy

I have a Digital Ocean droplet (similar to an Amazon EC2 instance) running Ubuntu Server 12.04.3 x64 with both strongswan 5.1.1 (built from source) and squid 3.4.2 (also built from source) installed. ...
1
vote
1answer
73 views

bind/named not working on UDP from external

This one is weird. I've set this up a long while ago, on a centos5. From what I remember, it used to work. For some time now, it's not. I've just been informed so no clue what changed when that made ...
1
vote
1answer
40 views

iptables password protection followup

This is a follow up on my other post about this iptables: plaintext password protection I could not get help in the old topic...I just really need some help... Here is the command I tried, something ...
1
vote
1answer
58 views

Use IPTables to force TCP packets over router

To test a TCP-stack program, I need to get the TCP packets via the router. When I try to connect to my server program via the router, the OS does not hit the router as the destination IP is the same ...
0
votes
3answers
86 views

How to configure iptables correctly

I'm a newbie to linux.I just implemented the following commands in iptables which I found on a site for security (i don't understand much about how each rule works). The commands are as follows: ...
0
votes
1answer
49 views

Per application rules in iptable

Is there possibility to add rule via iptable for specific process name? Good explanation of why I need it is here: "Under Windows, this helps making the PC more secure. There are many ...
1
vote
2answers
46 views

Connecting to an SSH server behind a NAT

I am having trouble connecting to an SSH server behind a NAT on an ubuntu workstation. I've installed openssh package(both the client and the server) and forwarded port 22 through the NAT and tried to ...
1
vote
2answers
101 views

Is selective VPN routing worth it?

I want to setup routing tables on my RT-N66U router to selectively route traffic through a VPN. For instance, only Pandora requests would go via the VPN. I've found a way to do this with iptables: ...
0
votes
0answers
22 views

how to keep counters on iptables rule replace ?

When replacing a rule (by it's number) the counters also get reset. I can think of a scripting solution tho on very high traffic this loses packets. Is there a way to keep the counters up ? for ...
0
votes
1answer
66 views

Routing traffic over Vpn without NAT?

I want to tunnel traffic through my vpn but I just realized that my kernel does not have nat enabled ;( iptables -t nat -A POSTROUTING -s 10.20.0.0/24 -o eth0 -j MASQUERADE iptables v1.4.14: can't ...
0
votes
1answer
60 views

How do I block every connection except vpn and ssh without endangering the state of my vps?

I have some vps space but I get alot of scans based on what I see in iftop. I tried some iptables stuff but it gets tiring and useless to put all the ips that I see in the logs. I am wondering about ...