0
votes
0answers
16 views

IP rule table look up does not seem to work

I have a sytem with three network interfaces. Below is the configuration that I'm trying to set up. wlan0 (its actually an WiFi AP interface) - other devices connects via this interface. net1 - ...
1
vote
1answer
38 views

Should my server ever need to directly communicate with the NAT gateway?

What I mean by ``directly communicate'' Does it ever need to receive packets with the gateway's IP address as the source IP address, or send packets with the gateway's IP address as the destination ...
1
vote
2answers
330 views

Why nic with incorrect subnet mask can still ping the gate way?

At first, my network config was like this: $ ip a 2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 3c:97:0e:bd:b1:68 brd ff:ff:ff:ff:ff:ff ...
0
votes
0answers
95 views

how to proxy to a VPN connected server with local services running?

I'm having trouble accessing services that are running on my Linux Box from outside the local network. The setup is not as simple as most tutorials describe so I'm a bit stuck. My Linux Box (running ...
2
votes
1answer
300 views

CONNMARK on rewritten packets

I have a host, on which I rewrite saddr and daddr of IP packets coming to it, this is done by the program, employing libnetfilter_queue. Basically it acts like proxy. For example, the packet comes ...
0
votes
0answers
65 views

Let everything except SSH/VPN use a VPN-Connection, but keep SSH working

Given the latest revelations about the size of Internet surveillance, I decided to route all my traffic trough an out of country VPN. I set the OpenVPN client up on my Router (Asus RT-N56U using ...
0
votes
0answers
91 views

Multiple eth0 addresses (aliases) and TCP source address

My eth0 card has several aliases from the same subnet (Load Balancing software) and eth0 IP is set as leading to default gateway on this host. I have an application that listens only on eth0:5 on ...
0
votes
1answer
770 views

Blocking all sites/IP address but Google.se with iptables

Im trying to block all IPs but Google.se. It doesnt work (Site does not display) Here is what I wrote: #/bin/sh echo "Flushing IPTables..." sleep 1 iptables -F iptables -X iptables -t nat -F ...
0
votes
1answer
126 views

How to drop IP packets received on the default route interface when no other than default route is found?

I am setting up a router based on a linux kernel. As expected, ipv4 packets received on the interface used by default route are sent back to the same interface in case no other route is found. Is ...
0
votes
0answers
754 views

How does iptables masquerading allow to access a different local subnet?

My Linksys router (IP 192.168.1.1 inside a /24 subnet) is connected to my ADSL modem (IP 10.0.0.138 inside a /24 subnet) to establish an internet connection via PPPoE. To be able to access the modem's ...
1
vote
0answers
278 views

Advanced QoS on prioritized first packages set by ISP

I have the following problem my ISP (Fibertel from Argentina) accelerates, 'enhances' the first 6.8 megabytes of downstream transfer and it's seems the first 1.8 megabytes of upstream transfer. This ...
3
votes
2answers
3k views

Using iptables SNAT based on source interface and ip address

I would like to change source ip address according to ip address and interface it came in. Let's consider following example: ----------------------------- | | | ...
1
vote
0answers
425 views

tc/netem and iptables: Delay traffic only from specified ip and port

I have a Ubuntu Router with 2 network interfaces. eth0 is the private network and eth1 is the internet. What I want is the following: All packages (mostly udp) comming from a specified private ip ...
0
votes
2answers
301 views

In Linux can I direct all traffic from a specific ip address or mac address to file

In Linux can I direct all traffic from a specific ip address or mac address to file. I am look of a way to take all traffic from a specific ip address or mac address and put it into a file. Does ...
1
vote
2answers
3k views

Setting up a Linux server with a public Static IP

I have setup a Ubuntu Linux server in an office. It should have a public IP so that outside users can access the internet. Currently, it is set with a public IP, but is it supposed to have a local ...