0
votes
0answers
16 views

Intermittent disconnections when using OpenVPN over SSH tunnel; possible iptables issue?

I've recently set up a Debian Wheezy server with OpenVPN to help out some friends in areas where internet censorship is a problem (including the blocking of VPN traffic in general). To overcome this, ...
0
votes
3answers
30 views

outgoing ssh fails from only one machine on lan to outside network

I have multiple servers in my LAN (which I'll refer to as Box1), and they are all able to make outgoing SSH connections, except one that stopped recently, which I'll refer to as Box2 (actually, I'm ...
1
vote
1answer
34 views

Bitbucket SSH and iptables

I'm a newbie in iptables to be honest. I have some basic rules. Everything is blocked by default. iptables -t filter -F iptables -t filter -X iptables -t filter -P INPUT DROP iptables -t filter -P ...
0
votes
1answer
83 views

How do I fix these iptables?

I am trying to setup my networks firewall, and am having trouble because i keep getting kicked out of SSH because of mistakes. Here's what I currently have: # Custom Rules iptables -F iptables -X ...
1
vote
2answers
66 views

How to check/adjust SSH server on embedded board

I'm currently having difficulties connecting to an embedded board from my Linux machine through ssh. The embedded board is a FOX G20 V with a Linux OS. I've tried to connect to the board through ...
2
votes
0answers
104 views

How to forward ports through ssh and nat to another machine

I have a problem when using ssh port forwarding and nat simoultaneously. Situation: Machine A runs a webserver on port 8080 Machine B is a raspberry pi which works like a little router. It has two ...
0
votes
0answers
36 views

Can't SSH into a computer that is connected to a VPN

I set up a linux machine with an ssh server that I can connect to from an external network. When I have the server computer use a private VPN though, I can't ssh into it remotely anymore. Is there ...
0
votes
1answer
177 views

How to create a local-remote-local tunnel to a specific port using ssh

I'm able to establish an ssh connection from my windows computer (localhost - eth1) to my linux computer (remotehost - eth0) by doing: ssh user@192.168.1.100 Instead of using that, because I use ...
0
votes
2answers
110 views

Is Iptables blocking outgoing ssh connections?

I have been trying to do pulls from github and it keeps hanging. My iptables rules have no rules which block outgoing traffic but I cannot connect to github using either ssh or http. I can't even ...
1
vote
2answers
105 views

Connecting to an SSH server behind a NAT

I am having trouble connecting to an SSH server behind a NAT on an ubuntu workstation. I've installed openssh package(both the client and the server) and forwarded port 22 through the NAT and tried to ...
0
votes
1answer
167 views

How do I block every connection except vpn and ssh without endangering the state of my vps?

I have some vps space but I get alot of scans based on what I see in iftop. I tried some iptables stuff but it gets tiring and useless to put all the ips that I see in the logs. I am wondering about ...
0
votes
1answer
137 views

UFW default rules… where are they?

In the tutorial on UFW here https://help.ubuntu.com/community/UFW it says that UFW uses the default rules if enabled and not configured. I checked the folder: /etc/ufw/ and the files I found ...
0
votes
2answers
111 views

How to set iptables?

I want to allow traffic only for httpd(nginx), port 2710 and ssh. I've tried the following, but it didn't work and apparently all httpd, traffic was blocked and I couldn't access ssh as well. There ...
1
vote
1answer
276 views

iptables NAT doesn't preserve remote IP

I have the iptables rules below forwarding incoming ssh traffic on port 2222 to a virtual machine running in a vmware "vmnet" network on the same host. 192.168.1.1 192.168.1.40 +---------+ ...
0
votes
0answers
90 views

Session limit for OpenSSH server on Ubuntu Desktop 7.10

I need restrict session limit on my OpneSSH server only for one session (one connection). I use Ubuntu Desktop 7.10. Of course Version is old, but I need it for experimental purposes. I tried modify ...
0
votes
1answer
589 views

Centos 6 server does not open ports

So after some battling and struggling with the firewall, i see that I may be doing something or the firewall isnt responding correctly there is has a port filter that is blocking certain ports. Okay, ...
0
votes
0answers
221 views

SCP over NAT stalls at 2112KB

I have two systems (A and B) on different subnets, with one dual-homed box (C) that can see both. I use iptables DNAT on C to port-forward SSH to B, so that A can run ssh -p 12345 hostC to connect to ...
1
vote
1answer
216 views

Adding a custom SSH port to Ubuntu 12.04 LTS through UFW

I am trying to configure a Ubuntu 12.04 based VPS and I have changed my ssh port from 22 to 803 and everything worked fine. After this I've installed UFW and now I can't login using SSH. Before I ...
1
vote
1answer
145 views

Disable SSH remote tunneling

I need to restrict SSH tunnel functions. Users should not be allowed to create remote tunnels but only tunnels to localhost. I tried to setup the whole thing in the SSH configuration but I can only ...
2
votes
1answer
150 views

Allow shell access for key holders OR password login for whitelisted IP addresses

As a first line of defense against brute-force attacks, I've restricted SSH login attempts with TCP wrappers (denying access by default, and maintaining an IP whitelist in /etc/hosts.allow). However, ...
1
vote
3answers
483 views

linux routing outbound port 80 traffic via ssh tunnel, iptables, or a simple route

I have two hosts, A and B. Host A hosts services on port 8080 and has outbound internet firewall rules allowing port 80 and 443 access to Host C. Host B is on the same subnet as Host A. Host B is ...
1
vote
1answer
590 views

Port-Forwarding for Click'n'Load remote usage

I've got JDownloader running on my HTPC and access it via VNC. The problem with Click'n'Load (CNL) is, JD only listens on localhost:9666 for incoming traffic, and the browser applications only send ...
7
votes
1answer
619 views

Sharing transparently proxied Internet connection with PS3

I am trying to play a Japanese karaoke game on a PS3 but the latency is just horrendous and downloading songs takes forever. One recommendation I got was to turn my laptop into a SOCKS proxy by ...
1
vote
0answers
246 views

IP forwarding with iptables

Suppose there are hosts A and B. A is allowed SSH access to B based on its IP address. Consider now another host C. C does not have access to B, but if we could route its traffic through A, then C ...
1
vote
1answer
394 views

Reasons why ports below 1024 cannot be opened

I'm root on a machine I don't know how it was configured. I try to open SSHD on another port than 22 but it does not work. I changed the /etc/ssh/sshd_config file and added a new Port line extra to ...
1
vote
0answers
540 views

SSH login with secure IP VPN

I have a PC behind a router with port forwarding setup Port 22 for SSH which works perfectly - I can login and everything. What I am trying to do is let this PC connect to a VPN and only allow ...
-2
votes
1answer
399 views

Open a linux port without using iptables in Centos? [closed]

just a quick question, is it possible to open a port on linux Centos without using iptables? If so, how do I do that from the command line?
1
vote
3answers
2k views

iptables restrict ssh session by mac address

I'm in the process of restricting access to my Linux production box, where ssh access needs to be limited to only a few MAC addresses. I've followed the instructions outlined in this guide and ran ...