2
votes
1answer
15 views

IPSet with IP6Tables ERROR

Can someone please solve my headache and tell me how to fix this? [root@www xtables]# ip6tables -I INPUT -m set --match-set blacklist6 src -J DROP ip6tables v1.4.7: Couldn't load match ...
1
vote
1answer
29 views

Iptables rules to only whitelist SIP providers

I have an Asterisk box sitting behind an ADSL router/modem. There are no other services on the Asterisk box, just telephony. I am getting a lot of traffic which I think are SIP probes. I've ...
0
votes
1answer
26 views

Redirect ports with iptables

I need to do redirect port 443 on all interfaces to 8080 on one interface using iptables on a box with 2 NICs. I also need to block pretty much anything else on those interfaces. Here is my iptables ...
0
votes
3answers
30 views

outgoing ssh fails from only one machine on lan to outside network

I have multiple servers in my LAN (which I'll refer to as Box1), and they are all able to make outgoing SSH connections, except one that stopped recently, which I'll refer to as Box2 (actually, I'm ...
0
votes
0answers
24 views

iptables error “FIX ME! implement getprotobyname() bionic/libc/bionic/stubs.c”

When I do this rule, the error shows up iptables -A INPUT -p tcp -m tcp -m multiport ! --dports 80,443 -j DROP I've also found some solutions. getprotobyname() just converts protocol names like tcp ...
0
votes
1answer
40 views

Asterisk server firewall script allows 2-way audio from incoming calls, but not on outgoing?

I'm running an Asterisk PBX on a virtual machine directly connected to the Internet and I really want to prevent script kiddies, l33t h4x0rz and actual hackers access to my server. The basic way I ...
0
votes
1answer
72 views

Block All Traffic and Allow from Defined IP only in IPTABLES

I want to create a gateway firewall for my network . I want to block all the internal traffic on gateway and allow it from two computers only . On gateway --> eth0 is network card in gateway PC ...
0
votes
1answer
32 views

iptables: Is it dangerous to filter by source port?

I would like to run a stateless firewall setup and I currently have the following rules: #Do not track any packet *raw :PREROUTING ACCEPT [0:0] -A PREROUTING -j NOTRACK COMMIT #Actual firewall rules ...
0
votes
1answer
54 views

iptables --append FORWARD required for routing between NIC alias IPs?

I have an ubuntu box with a single NIC. In order to bind a number of services (like apache, dnsmasq, etc), I have bound them to different alias's (e.g. eth0:0, etc), some of which are on completely ...
0
votes
1answer
16 views

Firewall rule for local, interactive users?

I want to add a firewall rule that applies to a local interactive user. The intention is to clamp down the box, and only allow web and mail related connections, and update service connections. On ...
0
votes
0answers
25 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat -A ...
0
votes
1answer
74 views

How do I fix these iptables?

I am trying to setup my networks firewall, and am having trouble because i keep getting kicked out of SSH because of mistakes. Here's what I currently have: # Custom Rules iptables -F iptables -X ...
0
votes
2answers
32 views

Why are these iptable rules keeping me from browsing the internet? (allowing 80,443,53)

This is for my home machine. Here are the rules: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 ...
0
votes
1answer
39 views

Ports in Linux vs Windows

I'm studying for a security class. I know that ports in Linux are tied to a process. So if I wanted to close/shutdown a port, I'd end the process that's using it. So if I'm in Windows, what's ...
1
vote
1answer
220 views

iptables blocking all traffic even with ports opened

Simple as I can put it: I can't access my servers with iptables enabled, with default rules. Need to disable iptables to get access. Trying to find the cause. Only difference in setup type is layer3 ...
1
vote
0answers
75 views

Conntrack/NAT's port mapping for a specific port breaks whenever that port's service is shutdown for too long. How can I fix this?

Linux Gentoo 3.13.6-hardened-r3 #1 SMP Sat Apr 12 09:17:25 EDT 2014 x86_64 Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz GenuineIntel GNU/Linux hardened with grsecurity and selinux with a strict policy in ...
0
votes
0answers
137 views

configure iptables to block all(as much as possible) bittorrent traffic

good day all This is my current iptables setup Generated by iptables-save v1.4.7 on Wed Apr 9 13:50:31 2014 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :LOGDROP - ...
0
votes
1answer
72 views

IPtables preventing outgoing packets

I am trying to setup firewall rules on a RHEL webserver, so that my webserver can serve up web pages and at the same time download remote files using curl/wget. Problem I am experiencing is I can only ...
0
votes
0answers
52 views

Display port numbers and port names

How do I display both port numbers and port names at the same time? I can display the forward port numbers (i.e. 22, 25, 1000, 443, 80) using the following: [root@michaels ~]# iptables -L -n Chain ...
0
votes
1answer
35 views

why iptables is accepting all in INPUT?

As we can see in this, which is the default iptables on fedora 20 $ iptables -L INPUT --line-number Chain INPUT (policy ACCEPT) num target prot opt source destination 1 ...
0
votes
2answers
107 views

Is Iptables blocking outgoing ssh connections?

I have been trying to do pulls from github and it keeps hanging. My iptables rules have no rules which block outgoing traffic but I cannot connect to github using either ssh or http. I can't even ...
0
votes
1answer
562 views

Forwarding all incoming traffic on eth0 to go to eth1

I am trying to setup my raspberry pi to sit between my router and my modem. I'm basically trying to set it up as an intercepting proxy so that all web traffic goes through the proxy. I have the ...
1
vote
1answer
151 views

bind/named not working on UDP from external

This one is weird. I've set this up a long while ago, on a centos5. From what I remember, it used to work. For some time now, it's not. I've just been informed so no clue what changed when that made ...
0
votes
1answer
150 views

How do I block every connection except vpn and ssh without endangering the state of my vps?

I have some vps space but I get alot of scans based on what I see in iftop. I tried some iptables stuff but it gets tiring and useless to put all the ips that I see in the logs. I am wondering about ...
0
votes
1answer
128 views

UFW default rules… where are they?

In the tutorial on UFW here https://help.ubuntu.com/community/UFW it says that UFW uses the default rules if enabled and not configured. I checked the folder: /etc/ufw/ and the files I found ...
1
vote
1answer
111 views

iptables detects clients behind NAT?

I'm setting up a server that I want to protect from DoS attacks, by setting a limit using iptables: iptables -A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT (default ...
0
votes
1answer
75 views

how to restore iptables after iptables -F?

I used iptables -F on my machine, and what can I do to recover the iptables into the default without rebooting my machine? I restarted the iptables service and it failed, and I can't find iptables ...
1
vote
1answer
138 views

Iptables limit user access time and mac

I am trying to create an iptable chain to kick my daughter off her ipad during the night. With the mac only filter I can block access but when I add time it no longer works. Does anyone see an issue ...
0
votes
0answers
193 views

Dropping Packets with Openvswitch Openflowcontrol

I am trying to setup some Flows with ovs-ofctl to block all unwanted incoming packets for a VM. The commands I use are: ovs-ofctl add-flow xenbr0 "priority=65000, table=0, tcp, dl_src=*, nw_src=*, ...
0
votes
1answer
201 views

Iptables filtering and NAT with secondary IP address

I have two IP addresses on my physical eth interface. Lets say 192.168.10.7 (eth0:0) and 192.168.0.7 (eth0). So it works. But I use application, working on the only one of this addresses on port ...
1
vote
1answer
134 views

With iptables only allow certain outbound ports

Okay, I'm running a router with shibby tomato (linux based) v1.28-115 and have a bridge network setup (br1) that consists of a guest wifi. I want to only allow access to specific outbound ports... ...
0
votes
1answer
84 views

Will using iptables DROP target cause TCP CLOSE_WAIT that never completes?

I have some simple rules to block certain IP blocks used frequently by hackers/spammers, e.g.: iptables -A INPUT -s 173.208.250.0/24 -j DROP But, I noticed that apache hangs after a couple of days ...
0
votes
1answer
245 views

iptables stupid error (iptables -A INPUT -j ACCEPT)

[root@router ~]# iptables -A INPUT -j ACCEPT iptables: No chain/target/match by that name. How is that possible? I recompiled the kernel (3.11.8) and updated iptables to 1.4.16. The strage thing is ...
0
votes
1answer
26 views

List rules using iptables in a customized way

How to list the iptables rules in a customized way? Like: target protocol portnumber src dest the order could be changed but I dont want the name of protocols, just number (like 80 instead of http) ...
0
votes
1answer
209 views

Understanding how dnat works in iptables

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.3 and ...
0
votes
1answer
275 views

Redirect PROXY traffic to test box using IPTABLES

Marked this as answered. I'm going to pass on trying to get this to work. It was only for testing. I'm currently using a proxy server (squid) that's listening on port 8080. Users' browsers are ...
0
votes
1answer
95 views

iptables FORWARD rule

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.1 and ...
1
vote
0answers
66 views

Define IPTABLES rule

I am working with a linux based UTM appliance and have some disagreement with the client on the operation. THere is a standard GUI to configure port forwards in the firewall but for some reason he ...
0
votes
1answer
224 views

Iptables output with options unknown

I have been learning and studying up on iptables and port forwarding. There is a sample iptables output I can't decipher. It has the options --dir, --pol, and -m. Although I am familiar with -m it ...
0
votes
0answers
117 views

Public IP is not accessible

I have a VPS, after a DDos attack, the service provider disabled my server until the attack finished. After recovering from the DDos, the main IP is not accessible at all! I don't know where to look. ...
0
votes
1answer
745 views

Fedora's firewalld vs iptables

I am on Fedora 19. Is my understanding correct that as long as firewalld is up and running (and properly configured using firewall-config) the contents of the /etc/sysconfig/iptables has no meaning? ...
1
vote
1answer
341 views

Internet access to host behind firewall using ssh tunnel

My goal is to give host behind firewall access to the internet. Below you can find brief description of network [internet] <-> [proxy] <-> [A] <-> (firewall) <-> [B] [A] - ...
3
votes
2answers
15k views

need iptables rule to accept all incoming traffic

For my test environment i want to accept all incoming traffic, can someone please give me the iptable rule to be added. My current iptables -L -n output looks like this Chain INPUT (policy ...
0
votes
1answer
2k views

Redirect incoming https to local ip with iptables

I have a router with 1 network interface (eth0, public ip) and an alias for eth0:0, local ip 192.168.1.1. I want to redirect all incoming https (443) traffic to another server. I tried it with ...
2
votes
2answers
1k views

what does “-m tcp” mean in this iptables rule?

Firewall configuration written by system-config-firewall -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
0
votes
0answers
100 views

Wireless printer connected to Raspberry Pi running iptables

My Setup: I have a Raspberry Pi set up as an access point using hostapd and dnsmasq I've got an Android tablet connected and a Samsung wireless printer. I have iptables running on the Raspberry ...
0
votes
1answer
94 views

IPTABLES to block sites on browser

I am trying to block a specific IP address from being accessed using the browser on my system. I added a simple rule as below iptables -A OUTPUT -d <IP> -j DROP The site gets blocked in the ...
0
votes
0answers
202 views

iptables not working on DDWRT firewall

I have write a firewall rules for DDWRT router but I didn't work. What I needed is, I would like to set all my wireless user, once it reach daily quota which is 200mb it will disconnected from the ...
0
votes
0answers
356 views

block specific request to a url with iptables via fwbuilder

I want to drop an http request to a specific url if it is made more than 20 times in 20 minutes. I guess it is something like following (please correct me if I'm wrong): iptables -I INPUT -p tcp ...
0
votes
1answer
798 views

Forward to Internal IP and Port From a Single IP Address on DDWRT Router

I'm trying to follow this guide and I have a simple request that I haven't been able to solve. I'd like to only accept requests from a specific IP address to a host within my internal network at home. ...