0
votes
1answer
12 views

CentOS - ipTables

I have some questions about ipTables. Is it possible to open all ports between 2000 and 6000 and then have 2245, 5435,5434 closed? Is it possible to open some ports from a ip address? Eg. The only ...
0
votes
0answers
58 views

CentOS 7.x iptables

I have manually edited the /etc/sysconfig/iptables file in my CentOs 7.x installation , I have two entries and two processes running at the respective ports. I am able to telnet/access port 2181 but ...
0
votes
0answers
8 views

Redirect external request thru VPN

I'm using Centos 5.4 and I'm trying to use the XMPP outside the company. But, the XMPP only works with the VPN. VPN connects and the XMPP become 10.0.2.49:5222 I tried to use iptables using this: ...
2
votes
1answer
28 views

IPSet with IP6Tables ERROR

Can someone please solve my headache and tell me how to fix this? [root@www ~]# ip6tables -I INPUT -m set --match-set blacklist6 src -J DROP ip6tables v1.4.7: Couldn't load match ...
0
votes
0answers
11 views

rails ssl setup on Amazon EC2

Environment Amazon EC2 CentOS Rails 4.0.4 SSL certificates installed Chef My Rails config In my environment .rb (staging.rb and production.rb) I added this config.force_ssl = true Started ...
1
vote
1answer
298 views

iptables blocking all traffic even with ports opened

Simple as I can put it: I can't access my servers with iptables enabled, with default rules. Need to disable iptables to get access. Trying to find the cause. Only difference in setup type is layer3 ...
3
votes
3answers
436 views

bridge does not forwarding packets centos

I am using CentOS 6.5 64 and use xen to create a virtual machine (CentOS) ifconfig [root@CentOS ~]# ifconfig eth0 Link encap:Ethernet HWaddr 08:00:27:54:B3:FA inet6 addr: ...
0
votes
0answers
56 views

Display port numbers and port names

How do I display both port numbers and port names at the same time? I can display the forward port numbers (i.e. 22, 25, 1000, 443, 80) using the following: [root@michaels ~]# iptables -L -n Chain ...
0
votes
1answer
220 views

Routing internal traffic in centos to the internet using iptables

Hello friends i am struck in routing traffic from the office to internet i have a network structure like this http://asthana.me/images/ip.png I have assigned static ip to the cent os server(which ...
0
votes
1answer
37 views

Turning iptables off on development server permanently?

What would be the downsides of turning off iptables permanently on a development environment? I don't like the fact that every time I restart virtual box I must do: service iptables stop service ...
0
votes
0answers
68 views

iptables not forwarding vbox traffic

I have a vbox vm that i would like to give unfettered internet access to, and i have found instructions on how to properly forward traffic using iptables, as well as the recommendation that the vm ...
0
votes
0answers
81 views

unable to configure nat on centos 6.4

i have configured nat on my centos 6.4 on vmware workstation with the following cofiguration i have two ethernet adapters eth0 and eth1 eth0 has public ip automatically taken by dhcp eth1 has private ...
0
votes
1answer
268 views

iptables stupid error (iptables -A INPUT -j ACCEPT)

[root@router ~]# iptables -A INPUT -j ACCEPT iptables: No chain/target/match by that name. How is that possible? I recompiled the kernel (3.11.8) and updated iptables to 1.4.16. The strage thing is ...
0
votes
0answers
114 views

CentOS 6 service iptables panic

me and my friend were doing some firewall configs and in the meanwhile he thought it was a good idea to type "service iptables panic". Now we cannot put the firewall back on the original state ...
0
votes
2answers
107 views

Server can't be accessed

I have a server I rent from OVH and I rebooted it and now I can't connect to it, OVH responded with "The server has started (login is requested on the screen) but inaccessible by the network (not ...
0
votes
2answers
59 views

port based nating with iptables

on eth0 port we have public ip and eth1 we have ip 10.31.0.1 which provides dhcp and squid service.Port 8080,53,67,80,443 is open.Now for an application we have to open 1521,8443 port so that it can ...
1
vote
3answers
3k views

Source Based Policy Routing & NAT (DNAT/SNAT) aka Multi WANs on CentOS 5

Originally posted at Unix and Linux but nobody was able to answer it, so m migrating the question here: My question is regarding Source Based Policy Routing on CentOS 5 with 2 WANs plus a LAN (NAT) ...
0
votes
1answer
285 views

Manually Editing iptables

I'm using CentOS. What I'm wondering is, what happens if I manually edit /etc/sysconfig/iptables and save it? Is that the definitive source? When I type iptables -L I get something that doesn't match ...
0
votes
1answer
358 views

How can I add the port to iptables rules on centos?

I want to open the port 8040 on my centos, but I keep getting connection refused. This is what I have done: iptables -I INPUT -m state --state NEW -p tcp --dport 8040 -j ACCEPT iptables -I INPUT -m ...
1
vote
1answer
733 views

iptables routing marked packets from router to PC and routing them back to router

I'm trying to do deep packet inspection on HTTP packets. The purpose of this is to collect HTTP payload data and then create some proxy/cache-independent reports. Following this, the idea is to ...
0
votes
1answer
92 views

IPTables Allowing Access without Rules

I'm sure this is mostly my misunderstanding of how iptables works, but I've set up some rules... -A INPUT -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT -A OUTPUT -p tcp --sport 22 -m ...
4
votes
2answers
9k views

CentOS 6 - iptables preventing web access via port 80

I'm setting up a new web server with CentOS 6.2 and am not able to connect via the web. Everything looks set up correctly in httpd.conf and Apache is running, so I'm assuming it's an iptables issue. ...
0
votes
1answer
197 views

CSF Unresolved issue

I began receiving service failures for CSF/LFD once the limit was reached in iptables preventing the service from working properly. I flushed all iptables rules, and redid by rules using CIDR rather ...
2
votes
1answer
340 views

What other ports should I block to maximize server security? PS using IPTABLES

I have blocked ports 80, 9001, 9080. What other ports should be blocked to maximize security? PS: It is a asterisk server / PBX Sorry: New Systems Admin here :) Thanks!
0
votes
2answers
668 views

blocking port 80 via iptables

I'm having problems with iptables. I am trying to block port 80 from the outside, basically plan is we just need to Tunnel via SSH then we can get on the GUI etc. on a server I have this in my rule: ...
0
votes
2answers
777 views

Filezilla not showing directory listing?

I had downloaded iptables from server to my windows desktop .I edited some lines for opening port (2195) .after download i added some line for enabling port using this link ...
1
vote
1answer
621 views

Linux Iptables Routing

I need help with a problem. My setup is: CentOS (Router) eth1 18.0.168.1 255.255.248.0 eth2 145.165.34.1 255.255.254.0 Windows Server 2008 18.0.168.2 My problem is from the Windows machine, I ...
1
vote
2answers
2k views

What means empty iptables?

I'm using CentOS and when type the command: iptables -L -v The output is as follows: Chain INPUT (policy ACCEPT 19614 packets, 2312K bytes) pkts bytes target prot opt in out ...
0
votes
1answer
2k views

Remove port aliases in iptables

How can I make iptables show me port numbers instead of aliases for well known port numbers (eg. http for 80, https for 443 etc.). Is there a way to make it show just port numbers at all times?
0
votes
1answer
513 views

Removing/Disabling Firewall on Linux CentOs seem to happen temporarily

I tried following the instructions in this link to disable and remove iptables firewall using commands: # service iptables save # service iptables stop # chkconfig iptables off # iptables -F # ...
1
vote
3answers
3k views

iptables syntax to forward remote desktop requests to a virtual machine on CentOS host

I can rdesktop into a VM running Windows XP hosted on my CentOS 5.4 machine from the hosting machine and work just fine using the private address (192.168.122.65), but I now need to allow remote ...