Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
1answer
62 views

How to Block all inbound and outbound traffic to and from an Local IP

I need to block entire traffic to and from an Local IP on an WiFi Network, I am using DD WRT Based router, So I Can use iptables. I know the IP Of an Client on the Local Network, Some thing like 192....
0
votes
1answer
54 views

IPtable rule to limit number of TCP connections on my PC

I have a limit on the number of TCP connections that I can make in my network. If I make more than 100 TCP connections, I get banned for a few minutes. My GoogleChrome in linux opens a lot of ...
0
votes
0answers
29 views

iptables tcp over NAT with NFQ

I'm working woth OpenWRT on a router, and would like to catch all traffic over port 1234 with NFQUEUE and set verdict according to packet. I know of snort and surricata, but would like my own package....
0
votes
1answer
126 views

Linux - Squid on local machine to control outgoing traffic

I'm trying to setup squid on my computer to control the outgoing traffic from the same computer only. If my understanding is correct, squid runs as user "squid" on on most Linux distributions (mine is ...
0
votes
0answers
128 views

Iptables MASQUERADE only selected ports

I did port forwarding following this tutorial: http://www.debuntu.org/how-to-redirecting-network-traffic-to-a-new-ip-using-iptables/ iptables -t nat -A PREROUTING -p tcp --dport 1111 -j DNAT --to-...
0
votes
2answers
411 views

How do I forward eth0 to wlan0?

I tried to forward eth0 to wlan0 on my Raspberry Pi B+ using NAT on iptables with the following commands: echo 1 > /proc/sys/net/ipv4/ip_forward iptables -A FORWARD --in-interface eth0 -j ACCEPT ...
0
votes
0answers
36 views

How To Setup a Firewall in Ubuntu 14.04 LTS

I have to set-up an Apache web server on Ubuntu 14.04 LTS and a Firewall Server on Another Ubuntu 14.04 LTS . My question is that how to connect firewall server to the next web server after installing ...
0
votes
1answer
44 views

Using iptables to bypass VPN based on user

Running the latest LTS Xubuntu and am trying to route traffic from processes initiated by one user (let's say 'jsmith') around a VPN. I think iptables is my only hope here? The relevant adaptors are ...
0
votes
0answers
47 views

Run script after Suricata drops or alarms

I have a Suricata IPS. I want after droping some packets, block their IP in my other servers. I have the command needed to block them. I just don't know how to parse new lines at fast.log and drop.log,...
0
votes
0answers
25 views

Problems with routing/firewalling with L2TP / IPSec

I have racoon configured for VPN along with L2TP (PAM auth), and I plan on using this for multiple users. My racoon.conf is: path include "/etc/racoon"; path pre_shared_key "/etc/racoon/psk.txt"; ...
0
votes
0answers
28 views

meaning of iptables -vL output

I ran the following commands: iptables -Z nmap 192.168.111.142 iptables -vL And I got this: Chain INPUT (policy ACCEPT 29 packets, 1484 bytes) pkts bytes target prot opt in out ...
0
votes
0answers
74 views

Transparent proxying for all docker containers

I'm running docker containers from behind a corporate firewall and it is always problematic that I have to set the proxying parameters in each container. This is especially bad when I run builds from ...
0
votes
1answer
153 views

Is there any other way to get IPTables to filter IP addresses based on geolocation in Ubuntu 12.0.4.5 (LTS)

So a few of the servers I manage are being slammed by traffic from China when the sites themselves would have utterly no appeal to anyone in China in any way. To make things worse, lots of unwanted ...
0
votes
0answers
29 views

iptables wont take any arguments

I have an ubuntu server configured as a gateway router with eth0 (ext connected to a dsl router) and eth1 (internal network) I have Source NAT enabled, to share the external IP with all internal ...
0
votes
1answer
39 views

Iptables issue error at line 2

I messed up with my ip table now i am facking some kind of issue with that iptables to start.Below content is present in my iptables file. But when i try to start the ip tables i am facing error as ...
0
votes
0answers
190 views

iptables-restore failed at COMMIT line, no detailed description

I'm trying to setup iptables (using iptables-restore) for a new server and was looking at the security docs from Linode, so basically used their templates for IPv4 and IPv6. These are both failing at ...
0
votes
0answers
38 views

Disabling incoming traffic on an interface

I have an embedded device, which uses iptables v1.2.11 for packet filtering. The device has two interfaces eth0 and a mobile channel ppp0. My goal is to disable all incoming traffic (to any listening ...
0
votes
0answers
26 views

Is it possible to route all traffic to a vpn except multicasts?

I am using a router with tomato firmware installed. My lan includes a tv, eg ip 192.168.0.2. The tv receives multicast broadcasts from an iptv provider, but can also access the internet to view ...
0
votes
0answers
59 views

Allow access to camera only by one IP - tomato

I'm running tomato shibby 1.2.8 on an ASUS router. I have a camera in my network, which has the IP 192.168.1.222 (static IP). I would like to block all connections to this IP, where the source is ...
0
votes
0answers
26 views

How does IPTables console logging effect network packet drops?

How does console logging effect network packet drops? I am asking because I have iptables running with logging option and it logs packets to /var/log/iptables. I didn't configure --limit option in ...
0
votes
0answers
223 views

Setting up Raspberry Pi as router with multiple interfaces on same subnet

Backstory: My college doesn't allow for multicast/zeroconf/upnp on their network (and understandably so, since there are way too many devices on the network). As a result, I'm trying to use my ...
0
votes
0answers
11 views

IPtables restrictions and OpenVPN

So, my friend has a virtual machine that runs linux and an OpenVPN instance. He wants to restrict all IP addresses except for address of an OpenVPN instance. The idea is, not to let anything to ...
0
votes
0answers
60 views

Unable to remove port 22 from firewalld

I am running a VPS that i have gone and installed firewalld on, on this box, the service comes by default with port 22 open so that you can still gain ssh access. I have manually changed the SSH port,...
0
votes
0answers
120 views

Can't reach server, using external IP from internal network

I have a Raspberry Pi 2, running Raspbian and using as a wireless VPN router. I'm a beginner with networking, but successfully set up masquerading to VPN's tap0 interface and allowing forwarding ...
0
votes
0answers
25 views

filezilla not connecting even with required ports opened

Server: Ubuntu 15.04 - 2.6.32-042stab094.8 Client: Windows 10 I did some iptables changes, saved all rules, naturally, reapplied them afterwards, summary of changes are: open ports tcp: 20, 21 ,...
0
votes
0answers
47 views

SSH Connection Refused : Wrong conf

I am trying to harden my SSH configuration. In addition to modify sshd_config file, I added some iptables rules. Here are the common ones: # Default policy iptables -P INPUT DROP iptables -P FORWARD ...
0
votes
1answer
1k views

TCP connect: No route to host

I started a tcp server on a host A and then start a tcp client on another host B. Both hosts are in the same LAN via the wireless router at home. the tcp client tries to connect to tcp server on port ...
0
votes
0answers
40 views

Local host's iptables dropping packets even though router firewall only forwards one port

I have a computer on a small WLAN that is connected to the internet via a router. The router has firewall software and I have set up the router firewall to forward port 1234 and only port 1234 to my ...
0
votes
0answers
32 views

How to fail fast with iptables?

Inspired by the Pi-hole I set up my own one. What it does: The Pi-hole is configured as a dedicated IP in my local net on a virtual adapter of Raspberry Pi. Get list of known spam / phishing / ad ...
0
votes
0answers
458 views

IPTables NAT and virtual interfaces

I have 2 VM's running CentOS 7 with the following ifconfig configurations: VM1: ifconfig eth0: public ip eth0:0: LAN IP 172.22.xx.x1 VM2: ifconfig eth0: no public ip eth0:0: LAN IP 172.22.xx.x2 ...
0
votes
0answers
242 views

Opening the Postgresql port

I'm trying to connect to a Postgresql server from a remote computer using: psql -U dbuser -h [host address] But I get the following error: psql: could not connect to server: No route to host Is ...
0
votes
0answers
24 views

Hostapd does not process HTTPS trafic from ppp0

I setup router server with hostapd 2.3 which works perfectly with eth0 -> wlan0 configuration. But if I'm switching config to ppp0 -> wlan0, then clients connected to wlan0 can access only to HTTP ...
0
votes
0answers
109 views

Policy based routing with uid (ArchLinux)

Desktop (ArchLinux) with 1 physical NIC wlp0s29u1u5 connecting to the Internet. There is then a Openvpn client run on it as tun0. How can I make it that user (uid 1000) traffic only uses tun0? I've ...
0
votes
0answers
383 views

Cannot open pritunl port to outside

I'm trying to install pritunl on my Ubuntu 14.04 VPS, I managed to open port 9700, so I can connect to the web interface, my VPN should be running on port 16118, but for some reason I am unable to ...
0
votes
1answer
728 views

Mark packets with iptables by destination mac address

I need to mark packets which goes to a specified mac address. I need this to use in shaper with tc. --mac-destination doesn't exist in iptables. Also I tried to use ebtables: ebtables -t nat -A ...
0
votes
0answers
38 views

iptables linux - open all ports/everything for few servers and close everything from other servers

I want to open all ports (everything) for few servers and close all traffic incoming from any other server. iptables -A INPUT -s <ip of server1>/24 -p all -j ACCEPT iptables -A INPUT -s <ip ...
0
votes
0answers
59 views

Iptables in DD-WRT

I have a WRT54GL router with DD-WRT connected to (in the same VLAN): IP radio with very low bandwith (192.168.1.107) Arduino with Ethernet Shield sending UDP messages (192.168.1.110) Another router ...
0
votes
0answers
99 views

Using pptpd with iptables and interface ppp0

I already asked this stackoverflow, but I was told to ask it here :) I'd like make a few ports only accessible via VPN (PPTP). I'm running Debian 8 on the server and pptpd v1.4.0 from apt-get and ...
0
votes
0answers
303 views

Route all traffic of several VMs through a specific VM

I want to setup 3 VMs such that VM1 and VM3 can only talk to each other through VM2. So basically, all the traffic from VM1 and VM3 needs to be routed through VM2. VM2 then forwards the traffic or ...
0
votes
0answers
135 views

How to block HTTP 302 redirection package by matching a specific string on Location?

The HTTP response I want to block has: Header HTTP/1.1 302 Found Location: http://www.yxjiaodai.com/ad/?id=1023&url=http%3A//a1819.oadz.com/link/C/1819/3081547/dtMdon4l79FwsIo2JXEHqtdp5eQ_/p007/...
0
votes
0answers
177 views

Error when configuring iptables while setting up OpenVPN on Raspberry Pi

I'm in the process of setting up OpenVPN on my Raspberry Pi. Not sure if this is the right forum to post this but when I was trying to configure iptables i get this error message. Any thoughts? Thanks....
0
votes
0answers
40 views

transfer ARP on linux iptables with diffrent subnet

Firewall(linux) - with 2 interfaces: internal, external ; also used as GW Internal: 192.168.254.1/16 External: 10.0.254.1/16 external_client(linux) IP: 10.0.1.1/16 internal_client(linux) IP: 192.168.1....
0
votes
1answer
169 views

can't telnet on port 5433 on localhost after iptables stop

I'm trying to do a telnet localhost 5433 on my RHEL box but I get a connection refused error. I did a service iptables stop but am still getting the same error. Where else do I need to look to allow ...
0
votes
0answers
43 views

iptables config to restrict dhcp trafic

eth0 is connected to internet, and eth1 is connected to clients, giving dhcp addresses. However, I've got some clients getting IP addresses via eth0. Is there a way to put a line on iptables dropping ...
0
votes
0answers
162 views

Securing bridged lxc container with iptables

For some reasons I need lxc containers which have the same IPs like the host itself and other computers in the internal network. Now, I setup so far the containers with a bridge which routes to veth ...
0
votes
1answer
163 views

Can't Access Port number 80 and 443 after adding Iptables rules

In my CentOS 6 i added a IPtables rules like DROP all the policy like iptables -P INPUT DROP Then I allow Port NO 22,80,443 with this command, iptables -A INPUT -i eth0 -p tcp --dport 80 -j ...
0
votes
0answers
15 views

Can't access my FTP Server due to change in value of IP_MODULES in iptables_config file

I could once access my FTP server usinf FIleZilla (FTP CLient) but couldn't upload files into it successfully. After trying the chmod 0777 and chown options and still couldn't upload files. I searched ...
0
votes
0answers
99 views

Linux: Don't allow any non-vpn traffic

I tried the search, as I'm sure this has been asked before, but I couldn't quite find a working answer. I wish to drop any connection that is not routed via VPN (with the sole exception of the ...
0
votes
0answers
168 views

iptables not able to load conntrack match

I have a problem using iptables like this: iptables -m conntrack iptables v1.3.8: Couldn't load match `conntrack':File not found Now I wonder how I can debug this. This is what I have tried. ...
0
votes
0answers
90 views

RaspberryPI OpenVPN Client Not Forwarding to tun0

reposting from the RPI SO - apparently off topic for Server SO... I found plenty of guides for how to run RPIs as OpenVPN servers, but I want to run it as a client. I have a OpenVPN server set up ...