Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

2
votes
2answers
133 views

Forward HTTP access to another IP address in iptables

Hi I am using my local internet provider whenever I visit any page and when I look at a source code of the page there is a script injected into code ...
1
vote
2answers
47 views

Forward IP of IP camera from eth0 to wlan0, on the same linux machine

I have a linux machine with 2 network connections, wlan0 and eth0. Through wlan0, the linux machine is connected to the router, and through eth0, the linux machine is connected to the IP camera (via a ...
0
votes
0answers
16 views

How can I duplicate traffic with iptables v1.3.5?

I want to duplicate all traffic and send it to my computer over cable to see what is my computer sending over wifi (it probably sends corrupted packets, because sometimes it jams all computers ...
0
votes
0answers
32 views

How should I configure my Linux kernel (running on armhf architecture) if I want to use the NAT-table in iptables?

I successfully compiled a Linux kernel (version 4.4) with nat support for my desktop computer that runs on a x86-processor. Now I want to do the same for my server which has an ARMHF processor. The ...
1
vote
1answer
43 views

Layer-2-Accessible DMZ: ebtables?

I'd like to make a network topology where all the IoT devices (printer, DVR, thermostat, BluRay player, etc) are all in a DMZ and the rest of my devices are all on the LAN. Note that the usage of DMZ ...
0
votes
1answer
53 views

iptables - kill established NAT connections

I have the following setup: PC eth0 connected to GW eth1 GW eth0 is connected to the internet. GW has net.ipv4.ip_forward=1 in sysctl.conf So, when I simply run (in GW): iptables -t nat -I ...
0
votes
0answers
28 views

Sharing internet connection from USB0 to WLAN0

I want to create a wireless AP from my kali linux machine to share internet connection to other devices. Internet connection to linux is given by USB tethering using an android mobile phone. There is ...
1
vote
0answers
44 views

Raspberry Pi iptables not working without active eth0

I just work on a AcessPoint, hosted from my Raspberry Pi B+. When a cable is plugged in on the eth0 adapter it all works fine. If someone connect to my AP, they will be redirected to the webserver, ...
1
vote
0answers
21 views

DD-WRT Router and Squid3 transparent box denying everything

As the title implies, I have a DD-WRT router that I use for the wi-fi network. What I want is to have my wi-fi traffic sent to my squid box so that I can monitor what is being sent over the wi-fi ...
0
votes
1answer
66 views

How to manage my firewall with new Centos's utilities?

I just installed a Centos7 distribution on my server. I came from Centos6, and I read that iptables utility has been replaced by firewalld and services utility by systemctl. So I try to get my ...
0
votes
0answers
70 views

hostapd cannot set channel for Kernel driver

I try to setup a Raspberry Pi as a router following the tutorial given here. OS is Raspbian. ifconfig gives: eth0 Link encap:Ethernet HWaddr b8:27:eb:b2:e9:eb inet addr:192.168.178.46 ...
0
votes
1answer
104 views

Port forwarding to VPN client

I have a router on Tomato (shibby) running an OpenVPN server (with TAP; interface is tap21 on the router). Various resources (including some workstations) are physically connected to eth0 on this ...
1
vote
0answers
59 views

iptables - NAT/PAT rules for HTTPS, HTTP, RDP, SSH

I'm trying to set up a gateway/router box and can't seem to get my iptables quite right. The goal is to have a private network of windows boxes that can talk to WAN for HTTPS, HTTP, and SSH. I want ...
1
vote
0answers
41 views

How can I use Ubuntu as a gateway into a remote LAN?

I need to be able to access whole remote subnets from a Windows PC. Here's my network layout: I -{MyLAN: 10.77.77.0/24, DHCP}--[Ethernet: 10.77.77.64] N (Windows 10 ...
0
votes
0answers
8 views

Packet is getting dropped even though iptables rule allows forwarding

I configured the following on CentOS to enable IP forwarding but limit to specific IP range(destination): iptables -D FORWARD -i eth0 -j ACCEPT #delete default ACCEPT rule iptables -P FORWARD ...
1
vote
1answer
18 views

MedaiWiki server publicly inaccesible on Raspberry Pi

I'm having trouble publicly accessing a MediaWiki server that I have set up on my Raspberry Pi. I am getting a "connection timed out" error when trying to visit the server remotely. It is however ...
0
votes
0answers
28 views

nfqueues and arp spoofing iptables

I am ARP poisoning and DNS spoofing my home network for learning purposes. When I get the victim to send their packets to my attacking computer, which rule do I have to create so I can intercept the ...
0
votes
1answer
33 views

How to configure a intranet router to inform its hosts about routes to other subnets?

It sounds a little bit strange, but the current network configuration is, I have two local networks: 192.168.7.0/24 and 192.168.144.0/24. Their gateways are respectively 192.168.7.1 (R1) and ...
0
votes
0answers
24 views

How do I forward/NAT all traffic to one interface to give internet acess for clients in ap?

I am trying to set up a router in my debian vbox virtual machine using an usb wireless adapter in at0, and a bridged adapter in eth0, I'm using airbase-ng and isc-dhcp for leasing IPs. The point is ...
0
votes
1answer
62 views

iptables routing of wlan0 to usb0 and usb1

Server: wlan0 (WAN) - 192.168.0.17 usb0 (LAN) - 192.168.2.15 Client: usb1 (LAN) - 192.168.2.2 wlan0 <-> usb0 <-> usb1 How do I configure a NAT to share my wlan0 internet access to my ...
0
votes
0answers
17 views

EVIL AP - Internet connection bridging issue

I've been trying to create an EVIL AP scenario in my test lab for a couple of days, but I always face the same issue. I can connect to the WIFI adapter and I receive an IP address etc, via dhcp. ...
0
votes
2answers
39 views

Ping between two Linux systems via an intermediate Linux fails

I have a simple network with three Linux systems running CentOS 2.6. Linux 1 (eth1: 192.138.14.1/24) | | (eth4: 192.138.14.4/24) Linux 2 (eth2: 192.138.4.3/24) ...
1
vote
0answers
65 views

rp_filter not working, still get martian errors and dropped traffic

I am using the below commands to setup test environment for traffic flow. I am using a bash shell for traffic source but would eventually be VM or container. I don't understand where the traffic is ...
0
votes
0answers
17 views

Routing between interface and OpenVPN tunnel

I have two NICs: ethernet and wi-fi. I configured an OpenVPN tunnel with route-noexec option, so the computer still uses ethernet connection by default. Now, I want to make an AP with my wi-fi card. I ...
0
votes
1answer
94 views

IPTables forward port to another ip:port but keeping original source ip

I have following iptables rules on gateway machine(192.168.0.1). I want to forward port 192.168.0.1:80 to 192.168.0.2:8080. But I need to maintain original source ip so that original server can get ...
0
votes
0answers
13 views

Ubuntu IPTables

I started hosting my game-server on Ubuntu Linux 14.04 I am having an issues ، some enemies/bug abusers log in 2+ characters in the same second then they spam a certain spell/word that lags/stops my ...
1
vote
1answer
85 views

Using iptables to redirect all traffic to local webserver

Aloha, I'm trying to redirect all traffic on my wifi router to a local webserver using iptables. I'm not sure i have got the command right and also I want to exclude the router IP (172.16.0.1) from ...
0
votes
1answer
28 views

How can I allow traffic to certain web address but restrict all other in linux

I want my linux (ubuntu 14.04 , 64 bit) system device which has a 3g card in it to have restricted access of internet . I want to build a scenario where if the card is active, the system should be ...
0
votes
0answers
70 views

How to redirect a device connected with my wifi hotspot to a localhost page

How do I redirect a device connected with my wifi hotspot to a localhost page (for example login form) Ubuntu 14.04 LTS? I tried many rules earlier suggested but no one works? Plz suggest step by ...
0
votes
1answer
54 views

Iptables: why my redirection doesn't work?

Linux slackware,i have put ftp server with unprivileged user running port 2121. Want to redirect all packets from 21 to 2121 so my ftp is avaliable as standard without specify the port. telnet host ...
0
votes
1answer
7 views

iptables - Add additional allowed IPs

This is what I have used as reference: http://unix.stackexchange.com/a/145933 So if I do: iptables -I INPUT -p tcp -s MY IP --dport 21 -j ACCEPT iptables -I INPUT -p tcp -s 0.0.0.0/0 --dport 21 -j ...
0
votes
1answer
18 views

drop iptables chain forward

I created the following rules (for FORWARD only): iptables -P FORWARD DROP iptables -A FORWARD -o lo -j ACCEPT iptables -A FORWARD -s ##MYIPHERE## -j ACCEPT And then I run iptables -L and get this: ...
0
votes
0answers
51 views

Send all outbound HTTP traffic from a rogue Wi-Fi router to an internal prank site

Today I discovered that my teenage son installed a rogue Wi-Fi router. It is plugged directly into the ethernet jack that I forgot was in his room. I assume he did it to bypass my internet schedule ...
0
votes
0answers
30 views

NAT with multiple interfaces

________ +------------+ / | | ...
0
votes
1answer
35 views

dnsmasq different replies based on source

I want to override the DNS configuration for some domains by using dnsmasq so that queries are forwarded elsewhere to be resolved. I can do this with this configuration snippet: ...
0
votes
0answers
31 views

IPTABLES Forwarding requests over Tinc to other Host on local network

I have a couple of dedicated servers and a few VPS boxes around the world (used primarily for office and personal email servers and other cloud storage). My ISP at home/office does not allow for ...
0
votes
1answer
98 views

Debian : Outgoing port-scans detected, what to do?

We recently received a notice from our Server-providers that they detected an outgoing port-scan from our Server. They checked for malware or compromised account, but didn't find any. All they have ...
0
votes
0answers
24 views

Can't add 81.23.228.129 to iptables because of SERVFAIL - any way round this?

I need to allow the IP addresses of proxy.sipthor.net through my firewall: nslookup proxy.sipthor.net Address: 85.17.186.7 Address: 81.23.228.129 Address: 81.23.228.150 Add these to iptables: ...
0
votes
0answers
14 views

Can't see any website hosted in a node while same issue is not present in other nodes in LAN

Recently we setup a Hadoop cluster with 10 nodes in our Office premises. All of these nodes are installed with CentOS 6. However the issue I'm facing may not be related to Hadoop and accordingly I'm ...
1
vote
1answer
67 views

Limit a range of ip addresses to specific ports using iptables

I am using iptables v1.4.21 on linux. I am trying to limit traffic for DHCP clients 10.0.0.50-10.0.0.100. I would like them to only have access to ports 53,67,80,443,9091,32400 using TCP and UDP. But ...
1
vote
0answers
16 views

How can i implement this iptables configuration with 2 gateways?

I'm trying to configure a firewall hardware to protect my nas. What i want to achieve is explained better with this image below: network scheme While the actual iptables config is the following: ...
0
votes
1answer
115 views

Open syncthing port on raspberry pi

I have just set up a raspberry pi with the raspbian OS. Other than installing LAMP and syncthing, I have not made many changes from the initial setup. I am accessing my raspi through SSH on LAN, and ...
0
votes
0answers
33 views

Secure settings for a personal OpenVPN IPSEC/L2TP server?

I'm trying to harden my personal server as much as possible. This is the first server I have managed, so I'm also using this as a learning experience. My setup so far: 4096 bit SSH keys SSH is on a ...
0
votes
1answer
35 views

iptables: is it possible to combine “string” and “mac” modules results?

I have a raspberry pi running dnsmasq. I configured all my local devices to use this device to resolve DNS queries. I like to block certain devices using their MAC address from certain queries. ...
-1
votes
2answers
63 views

Server, laptop, router, and modem, IP addresses?

I have a simple server at home. The server is directly connected to the modem and has IP: 192.168.1.7 My laptop is connected to a wireless router, which is connected to the same modem. My laptop has ...
2
votes
1answer
150 views

Troubleshooting port forwarding

I'm trying to run a web server from my home network, but I have some difficulty reaching my server from the WAN. If you have an idea where the problem could lie, or need more information, please let ...
0
votes
0answers
27 views

DDWRT - Restricted URLs not working

I have set up URL and keyword filtering in the Web GUI. It is enabled, has the correct IP range, is saved and applied. Yet URLs range are not getting blocked. nvram show | grep shows the filters ...
0
votes
0answers
48 views

OpenVPN client on DD-WRT router. How to block all WAN traffic when VPN is disconnected?

I've successfully configured the OpenVPN client on my DD-WRT router and verified that all traffic is being routed through the VPN. How would configure it such that all WAN traffic is dropped when the ...
0
votes
1answer
21 views

Apache test screen not loading. Connection refused when connecting to public ip

I'm having problems getting Apache to work. I've followed the Amazon AWS instructions (http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/install-LAMP.html) but my computer is refusing to load the ...
1
vote
1answer
44 views

How to add virtual NICs to my linux PC, so that they expose their MACs to ISP's domain?

I have learned how to add virtual NICs to a guest system in VirtualBox, just using Shared Adapter, then all the virtual NICs and my host's NIC will appear as real NICs to the ISP. So I guess there ...