Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
2answers
36 views

Problems in creating rules in iptable

Hello to all :) I need a little help with creating a rules. Im starting to learn iptables and firewalls but I have some questions. I need to allow HTTP communication only from PcA to PcB./ My code is: ...
1
vote
1answer
2k views

Limit UDP outbound traffic to loopback (localhost) instead of eth0

Atm i'm testing it on Ubuntu Server at VMware Workstation + Windows 7 local host with bridged connection. Later this has to go to live server. I have VLC streaming video file on Ubuntu with cvlc ...
1
vote
0answers
201 views

Change UDP port with iptables for VPN clients

What I want to do is say that for all UDP connections on interface ppp0 that have a destination port of 53, change that destination port to 1053. I am attempting to change the destination port of UDP ...
0
votes
1answer
233 views

How to drop IP packets received on the default route interface when no other than default route is found?

I am setting up a router based on a linux kernel. As expected, ipv4 packets received on the interface used by default route are sent back to the same interface in case no other route is found. Is ...
4
votes
1answer
4k views

Load balancing with multiple gateways

I have to different ISPs, each on each own network. The main connects via ethernet and the secondary via wifi. The two networks have no relation at all. I just connect to them simultaneously. The ...
5
votes
1answer
2k views

How to configure port forwarding for an IP camera

I need to configure port forwarding for my IP camera so that I can access it from internet. UPNP is not supported on my gateway. My network configuration is the following: Gateway (Ubuntu Server 12) ...
1
vote
2answers
2k views

IPtables Rules to Block IP Range

I've applied the following rules from a text file called "iptables.save" to iptables. But to my dismay, I found that the ip address 107.22.26.176 is still able to access my server via TCP. What did ...
0
votes
1answer
265 views

How do I drop the entire INPUT chain from iptables?

On Linux, I've been building a malicious IP list. I assume the DDOS is now gone. How do I drop the entire INPUT chain from iptables, without affecting the FORWARD or OUTPUT chains?
0
votes
1answer
127 views

Linux gateway / DNAT: restrict to certain interfaces

I have various machines with a number of network interfaces: eth0: a local LAN eth1: sometimes used for the connection to the Internet gateway ppp0: Modem uplink as an alternative to eth1 tun0: ...
1
vote
2answers
1k views

How do I route a port range in a linux host to a guest VM?

I am trying to redirect a certain port range in a linux host to one of its guest VMs. I would like for this redirection to apply to all the host's interfaces, including localhost. I was able to do: ...
3
votes
1answer
345 views

Allow shell access for key holders OR password login for whitelisted IP addresses

As a first line of defense against brute-force attacks, I've restricted SSH login attempts with TCP wrappers (denying access by default, and maintaining an IP whitelist in /etc/hosts.allow). However, ...
1
vote
1answer
1k views

Can't connect to SSH over VPN when using 3G only

I'm having a bit of a strange problem that I'm not sure how to debug/fix. I have a Raspberry Pi connected to a Windows VPN via either a wired interface or 3G dongle. With the wired interface I can ...
0
votes
0answers
1k views

How does iptables masquerading allow to access a different local subnet?

My Linksys router (IP 192.168.1.1 inside a /24 subnet) is connected to my ADSL modem (IP 10.0.0.138 inside a /24 subnet) to establish an internet connection via PPPoE. To be able to access the modem's ...
3
votes
2answers
2k views

How to test IP Tables Rule (Linux Ubuntu12.04)

I wanted to ask how to test IP Table Rules. For example, I have a port number and I want to be sure that it accepts all packets. How can I do it? After I type iptables -L I see that the rule has been ...
0
votes
1answer
2k views

using iptables to prevent RST related to a specific port

I have a program which uses libpcap to capture incoming TCP SYN packets, these SYN packets are destined for a specific port. But I have no tcp listening socket for that port, so in practice, the OS ...
1
vote
1answer
2k views

Port-Forwarding for Click'n'Load remote usage

I've got JDownloader running on my HTPC and access it via VNC. The problem with Click'n'Load (CNL) is, JD only listens on localhost:9666 for incoming traffic, and the browser applications only send ...
0
votes
1answer
808 views

How to allow access to only specific IPs with Parallels VZ built-in firewall?

How can I use Parallels Virtuozzo's built-in firewall utility (called psa-firewall under the hood apparently actually psa-firewall seems to be a seperate Plesk interface - either way, it's basically a ...
0
votes
3answers
125 views

iptables rules are not in action

I have a iptable rule file, on the INPUT chain I have -A INPUT -i em1 -p tcp -m tcp --dport 54000 -j ACCEPT -A INPUT -i em1 -p tcp -m tcp --dport 30000 -j ACCEPT -A INPUT -i em1 -p udp -m udp --dport ...
1
vote
0answers
521 views

Advanced QoS on prioritized first packages set by ISP

I have the following problem my ISP (Fibertel from Argentina) accelerates, 'enhances' the first 6.8 megabytes of downstream transfer and it's seems the first 1.8 megabytes of upstream transfer. This ...
0
votes
1answer
134 views

allow redirects with iptables

with the following rules, php can't make a redirect to another file. it's freezes at the point when it gets toheader("Content-type: video/x-flv"); header("Location:" . $VIDEO); or ...
0
votes
1answer
877 views

How can I add the port to iptables rules on centos?

I want to open the port 8040 on my centos, but I keep getting connection refused. This is what I have done: iptables -I INPUT -m state --state NEW -p tcp --dport 8040 -j ACCEPT iptables -I INPUT -m ...
-1
votes
1answer
152 views

Configure IPTables [duplicate]

We have RHEL 5.0 squid proxy in our office. Our LAN is 172.20.12.0 /24 n/w. Proxy ip is 172.20.12.4 /24 . I want to share Internet through proxy. Most importantly: Suppose I have flushed the ...
0
votes
2answers
383 views

Iptables: Allow Internal LAN to access INTERNET

I have an internal network behind my router on eth0, and I have my router connected to the internet thorugh wlan0. I can't access the internet from inside the lan, how can I fix this? wlan0: ...
3
votes
1answer
1k views

iptables status enabled after restart even after disabling

I am disabling iptables on Oracle Linux 6 with these commands. setenforce 0 service iptables stop service ip6tables stop chkconfig—level 123456 iptables off chkconfig—level 123456 ip6tables off ...
-1
votes
1answer
819 views

LInux squid proxy

We have RHEL 5.0 squid proxy in our office. Our LAN is 172.20.12.0 /24 n/w. proxy ip is 172.20.12.4 /24 . I want to share internet through proxy. Most importantly: I want to give full access to ...
0
votes
1answer
807 views

how to telnet redirect ip and host using iptables

I try to telnet from PC 3 To PC 1 and it's redirect to PC 2 PC 1 : 192.168.0.1 PC 2 : 192.168.0.2 PC 3 : 192.168.0.3 i have command like this in PC 1: iptables -t nat -A PREROUTING -p tcp -d ...
0
votes
1answer
1k views

UDP packet and firewall

I notice when I send udp packets from computer A to computer B, B can receive the upd packets correctly but if I send udp packets from computer B to computer A the udp packets are not received A and ...
1
vote
1answer
160 views

iptables simple forwarding setup woes

I have iptables running on a host (acting as a firewall) in a Linux namespace with only one network interface: h2-eth1 (has an IP and MAC address) I have set up my switch to forward all packets to ...
3
votes
1answer
1k views

Linux iptables forward from ip1:port1 to ip2:port2

I connect thought tunnel to other machine like this: ssh user@ip -L2000:192.168.64.88:80 So on my local machine I want to configure iptables that way like I have a "native" access to ...
2
votes
4answers
479 views

Block all but http traffic on a network interface

I've got two network interfaces on an Ubuntu machine which go out to two different networks but both have internet gateways. I need to limit it so that any outgoing http requests it makes (ie ...
1
vote
2answers
2k views

iptables port based routing

I've been Googling this for days with no success. I connect to a VPN from my server from time to time and I'm trying to configure my Debian server to only use port 80 and 443 through the VPN and all ...
2
votes
2answers
552 views

How to send out some traffic via my vpn connection

I had a working setup where I could access all my work resources which are accessed via VPN going via my server previously however at some point recently this stopped working for no obvious reason. ...
2
votes
1answer
295 views

Restrict the number of http and https connections from a specified IP address to ten connections per minute

How I can restrict the number of http and https connections from a specified IP address to ten per minute usingiptables commands? I’ve tried this but it is not working: iptables -A INPUT -s ...
3
votes
3answers
2k views

iptables - add rules not as root

One of our servers is being hit daily by a large number of spam bots. They're not able to post any spam, but they still try and end up slowing down the server for real users. To counter this, I have ...
3
votes
2answers
6k views

Using iptables SNAT based on source interface and ip address

I would like to change source ip address according to ip address and interface it came in. Let's consider following example: ----------------------------- | | | ...
1
vote
1answer
2k views

DD-WRT - Host-based forwarding

I would like to know if I can configure DD-WRT router, that operates as the server's network gateway, so support different forwards based on hostname (other than port 80). I've configured ...
3
votes
1answer
2k views

IP forwarding on the same network

I have a raspberry pi that I have put wifi on. I am also using its ethernet connection to bring internet to my XBox 360. I want to bridge these connections AND keep them both on the same network. For ...
0
votes
0answers
214 views

IPTables masquerading stops working

In a classical SOHO setup I am running a Debian box as router/firewall. For an unknown time now I have an issue, where the MASQUERADING on the output connection (PPPoE) stops working for one of the ...
0
votes
1answer
487 views

Iptables: allow specific ips on specific port

I am trying to allow a few IPs on port 80 and disallow all other from access port 80. Can someone suggest the iptables rules needed for this to occur?
5
votes
0answers
3k views

How do I configure DD-WRT to forward IPSec traffic to an internal server to support a road warrior configuration?

I use dd-wrt as my home router setup and that's been working fine. Now I wanted to figure out a way to be able to use my iPad to set up a IPSec tunnel to my home network while I'm on the road. PPTP ...
2
votes
1answer
1k views

How to route specific traffic through OpenVPN?

I'm running a server at home with rtorrent and apache2. I would like to route my rtorrent traffic via OpenVPN and since im kinda new to OpenVPN and iptables i would like to have a user friendly guide. ...
7
votes
1answer
1k views

Sharing transparently proxied Internet connection with PS3

I am trying to play a Japanese karaoke game on a PS3 but the latency is just horrendous and downloading songs takes forever. One recommendation I got was to turn my laptop into a SOCKS proxy by ...
0
votes
1answer
2k views

DNS resolving broken after installation of bind due to iptables

I successfully configured my web server (Apache, PHP etc.) and blocked the ports I don't need using iptables, which was working perfectly fine. Today, I installed BIND and configured it, which also ...
0
votes
1answer
126 views

Accessing ports remotely

I have a fedora server on a local network which I can access through VNC. I am trying to install a JIRA plugin called Activity timeline, these are both built using Java. When I log into VNC and ...
0
votes
1answer
653 views

Port 6667 can't be reached outside of localhost

I've got IRCD-Hybrid installed with the following listen config: /* listen {}: contain information about the ports ircd listens on (OLD P:) */ listen { /* port: the specific port to listen ...
1
vote
0answers
322 views

Load-balancing: response packets not routed - iptables

I have a problem with iptables. I'm trying to setup a load balancer between 2 uplinks. I can mark packets and connections, use ip rule to choose routing table (so changing the gateway). But, when I ...
0
votes
1answer
469 views

How to setup IPtables to allow capture network traffic from a virtualbox VM configured with NAT

I would like to have a VirtualBox virtual machine that can't get online. I want to be able to monitor all network traffic attempts from the Linux host. So, if the virtual machine attempts to make a ...
6
votes
2answers
289 views

Open up firewall automatically to anybody who has successfully connected via SSH

I have a server which runs a few services. However, for security reasons, I configured the server so that nothing, except for SSH, is accessible from outside. What I'd like to do instead, though, is ...
2
votes
2answers
5k views

How to route specific traffic through OpenVPN?

I'm running a server at home with rtorrent and apache2. I would like to route my rtorrent traffic via OpenVPN and since im kinda new to OpenVPN and iptables i would like to have a user friendly guide. ...
1
vote
1answer
1k views

Filter multicast from WAN to specified vlan

I'm using ebtables to filter multicast IPTV from my Wireless and Wired Lan. Right now its configured like this: Router ( DD WRT ) VLAN1 (PC Network) VLAN2 (IPTV) I am using this command: insmod ...