Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
2answers
77 views

ipTables, how to block all services requests on port 80 for an IP?

On a linux server/router, I want to block port 80 only for one IP (example : 1.2.3.4 ) I have been given this example : ### Block Incoming Port Requests (BLOCK PORT) # To block port 80 only for an ip ...
0
votes
0answers
22 views

Unhappy mixture: linux, tuntap, namespace,pppoe

I have created three namespace(ip netns), x, y z and a ip bridge called brig0. I am trying to route packets to the pppoe connection in namespace y. I want to know why tun0 says "no-carrier"? How can ...
0
votes
0answers
39 views

Connection interruptions on Debian router, possibly due to excessive duplicate ACKs?

I have a Debian server as a house router, which for a year has been working flawlessly. However, I recently moved and switched service providers from FiOS to Comcast, and possibly as a result am ...
1
vote
2answers
120 views

How to passthrough Wifi DNS and internet access to DHCP client

I have a laptop that connects to wifi for internet access. This computer is running Linux (Fedora), and it is acting as a DHCP server for another (ubuntu linaro) computer that does not have a wifi ...
0
votes
0answers
19 views

OS X iptables owner equivalent OR use only vpn for specific user

I am trying to make sure all network traffic initiated by a specific user on OS X Yosemite will go through a specific vpn or otherwise be blocked. I imagine I could do that easily on linux using ...
1
vote
0answers
300 views

how to port forward to server + tunnel specific hosts route though openvpn client on tomato

Running Shibby Tomato v130 on an Asus RT-N66U. My goals are the following With Transmission running on the router have all torrent traffic route through an OpenVPN client also running on the ...
0
votes
2answers
34 views

Use iptables to block local connection

I wish to block all connections (local and remote) to a service running on a particular port, say port 1000. I have tried the following command: iptables -I INPUT 1 -p tcp --dport 9999 -j DROP ...
1
vote
0answers
72 views

502 bad gateway after putting up firewall nginx

My server was working, then I added a firewall for a bunch of ports! And now I get the error: 502 Bad Gateway nginx/1.4.6 (Ubuntu) Nginx server { listen 80; server_name 45.79.80.140; ...
3
votes
1answer
60 views

Program to block an IP temporarily with iptables

Is there a program on Debian to block an IP address temporarily just by launching a command (specifying the IP and the duration)? With iptables/ip6tables alone I can create a rule, but I would then ...
0
votes
0answers
49 views

iptables block access to all ports except 53 (tcp,udp) from one IP address

how can i block all ports from one IP address except the port 53 TCP,UDP? example: ip 192.168.0.15 access only port 53 (udp,tcp). thank you.
0
votes
0answers
24 views

Automated Wifi on Raspberry Pi

I have a NAT set up, that allows my devices to bypass the MAC filter in the local dormitory router. The setup works, but since my original "nat server" has died (the HDD got fried), I had to put my ...
7
votes
1answer
125 views

SSH to Vmware virtual machine with NAT network [duplicate]

right now I am able to ssh to host over internet and ssh from host to the virtual machine. What I want to do is ssh directly to the Guest machine from outside. I tried to do this using iptables: ...
0
votes
0answers
33 views

How To Configure Portforwarding with iptables

I have got a "Hypervisor" witch has two interfaces: eth0 Link encap:Ethernet Hardware Adresse d4:3d:7e:fc:b2:db inet Adresse:87.25.34.251 Bcast:87.25.34.255 Maske:255.255.255.192 ...
0
votes
0answers
57 views

DSCP to p bit mapping in Linux

Re posting from Networking forum as per suggestion Linux1--------------------------------------------Linux2 eth0 10.10.10.30 eth0 10.10.10.10 eth0.50 20.20.20.30 ...
0
votes
0answers
25 views

Bypassing VPN routes based on the destination port

I have a Raspbian machine connected to a VPN using OpenVPN. Without any configuration, all traffic goes through that VPN and I have no control over the VPN server. What I'm trying to achieve is ...
0
votes
2answers
69 views

How to set up iptables to open ports 80 and 443

I try to understand how iptables works but after a lot of hours and readinga lot of articles I have stuck. What I want to do is DROP INPUT & FORWARD policy and open some ports. More specifically, ...
0
votes
1answer
65 views

Iptables SNAT routing to openVZ containers

For this to make sense I need to set the scene a bit. I have a dedicated server with 5 public Ips : A.B.C.1 to A.B.C.5 A.B.C.1 manages the dedicated server itself, and A.B.C.2 - 5 are used for ...
3
votes
1answer
81 views

iptables on openwrt router: logging connections to a host from clients on the same subnet

I am trying to setup an auto wake-on-lan setup using my router that is running OpenWRT 14.07, Barrier Breaker. My idea is that the router monitors any connection attempts to the host I want to wake up ...
0
votes
1answer
65 views

Redirecting HTTP and HTTPS from LAN to a page with iptables

I'm using the iptables command on a router running Bananian Linux in order to redirect all incoming traffic to a small webserver which serves a 302 Redirect to a login page (also hosted on the ...
2
votes
1answer
82 views

A secure, iptables rule-set for Ubuntu home router

I am using a Ubuntu 14.04 server machine as my primary home router and firewall. It has DNS, DHCP and uses iptables to secure everything up. Iptables also acts as a nat. On eth0 I have my incoming ...
2
votes
0answers
25 views

Simulate SNMP Trap with SNAT

I have to test SNMP 2c Traps. I want to send those traps from some computer and the trap destination has iptables. So before the trap enters the NMS, I could just rewrite the real source of the trap ...
0
votes
0answers
101 views

DNS and transparent intercepting squid

I am building a transparent intercepting squid proxy in my home network. My network is 10.10.10.0/24 with a soho adsl router that is the DHCP server with a extra static route network addr 0.0.0.0 ...
3
votes
1answer
200 views

Does tcpdump bypass iptables?

I mistakenly setup open resolver DNS server, which was soon used for bunch of DDoS attacks originating somewhere from / to russia. For that reason I completely blocked port 53 on both DNS servers for ...
0
votes
0answers
37 views

Ubunbtu 12.04 iptables error after upgrading kernel to 3.4

I been using Ubuntu 12.04 for well 3 years and using it with kernel 3.2. I decided to upgrade to kernel 3.4 because some freezing problems starting to occur more and more. Well the update went well. ...
1
vote
2answers
144 views

OpenWRT: iptables rules will be deleted automatically

In my OpenWRT instance, I have added iptables rules in the Input filter table, but the problem is when I turn on my system I found that the rules are deleted. What can I do so that the rules are not ...
1
vote
0answers
36 views

Iptables: dropping/rejecting new and invalid connections

I'm very new to iptables and my goal is the block NEW and INVALID connections on the INCOMING chain and log any attempts for a NEW connection. I'm also letting any and all traffic out on the OUTGOING ...
2
votes
1answer
201 views

vpn, IP forwarding and nat

I have setup a Softether VPN on an Ubuntu 14.04 server in an aws network which has about a dozen servers using this guide. The only difference is that I have used SecureNat and softether DHCP. I can ...
0
votes
2answers
79 views

How can I block all outbound connections?

I need to block my server from initiating any connections to a remote server. However, I still want the server to be able to reply from connections initiated via clients connected. In other words, I ...
0
votes
0answers
14 views

Single iptables on openwrt

I have a router with a fresh openwrt install and local network 192.168.5.0/24. There is a server SERV on 192.168.5.100 (HTTP and some other services). There is also a pptp-client tunnel (visible on ...
0
votes
0answers
71 views

Can I use iptables to temporarily block FTPS (TLS) server brute-force attempts?

There are couple of similar questions like this (e.g. http://serverfault.com/questions/200539/can-i-use-iptables-rate-limiting-to-temporarily-block-ftp-server-brute-force-att) , but I have a slightly ...
0
votes
0answers
93 views

Cannot ping virtual host behind NAT port forwarding

I'm creating network between real Windows 8.1 (R) and two virtual Debian 8 (V1, V2) using VM Ware. V1 has running Tomcat and should have access only to V2 and R should redirect V2 to V1. I used two ...
2
votes
0answers
149 views

How do I block with specific string with IPTABLES?

Want to block this URL STRING with IPTABLES. Need to know specific command. "GET /affiliate/5/campaigns?api_key=duO5gVw3s0&affiliate_id=67647&format=json HTTP/1.0" 404 785 "-" "Dalvik/1.6.0 ...
0
votes
1answer
43 views

What is the best way to limit the IP addresses which can be access from within a docker container?

I have an answer which will limit docker containers to only be able to access a single IP address outside the host. Using this iptables rule on the host: iptables -I FORWARD -i docker0 ! -d 8.8.8.8 ...
0
votes
0answers
35 views

Routing application traffic through interface, not receiving replying trafic

I'm trying to set up a Plex Media Server on a Arch server. However most of the time the server is connect to a VPN and I want the Plex traffic to be routed outside of the VPN interface, tun0 and ...
1
vote
1answer
47 views

Ubuntu router setup guide iptables rules

I'm trying to figure out the meaning of the iptables rules in the Official Guide for Setting up a Ubuntu Router. For example, *nat. I can not find anywhere on the internet that has *nat for iptables. ...
1
vote
1answer
44 views

iptables: How to “override” a port redirect?

My setup is as follows: I have a Linux server with two interfaces, eth0 and eth1. eth1 has an Internet connection through my normal LAN. eth0 is serving DHCP and the interface itself has an IP ...
0
votes
0answers
44 views

Failover on voyage os using eth0 and ppp0 interfaces

Hi I am having problem for failover handling on voyage os. I have a system with eth0 and ppp0 interfaces where eth0 is primary and ppp0 is a secondary path for traffic. root@voyage:~# route -n ...
0
votes
0answers
24 views

Cannot access my port from other systems in same network

My machine is running in Red Hat Linux OS. I have setup a server using apache in port 8060. I am able to access in localhost but not is other systems for the same network. I am able to ping the ...
0
votes
0answers
25 views

Accessing Web UI with Spark1.3.1

I am currently building and deploying spark with standalone mode, including one master node and two worker nodes, on Google Container Cluster. For monitoring purpose (also connecting to master from ...
3
votes
1answer
96 views

Allow only one website using iptables in a linux router [duplicate]

I have a Linux server I'm using as a router for my internal network. I need to block all the websites except one or two using iptables. How can I set this up?
0
votes
1answer
53 views

Redirecting marked packets to Tun device

I have a small program that needs to do various things with a selection of packets, based on various iptable rules. The packets are MARKed this way: iptables -t mangle -d 10.10.0.0/16 -j MARK ...
0
votes
1answer
27 views

How to white list some ip and all the rest block while having already a DMZ?

I have a Linux machine running which has local ip: 192.168.1.2 connected to a router with public IP 8.8.8.8, now the router 8.8.8.8 has DMZ to 192.168.1.2 As a result spammers, hackers, crackers ...
0
votes
1answer
60 views

Samba ports still closed even with iptables rules flushed and disabled

I’m trying to install Samba on a server running CentOS 6 with WHM/cPanel, and I’m having some trouble with ports. This is a brand new system as of yesterday, and I haven’t yet started locking down ...
1
vote
0answers
61 views

Why do my nat iptables rules not work with marked packets?

System: debian squeeze, Linux server 2.6.32-5-amd64 #1 SMP Tue May 13 16:34:35 UTC 2014 x86_64 GNU/Linux, iptables v1.4.8 lsmod | grep iptable iptable_security 2176 0 iptable_mangle ...
-3
votes
1answer
43 views

about CentOS 7 apps & Driver [closed]

im using pc for several years but never tried Linux so im quite noob in this field. im using Autodesk maya, Nuke & will learn houdini very soon. i found that linux works faster for this apps so ...
0
votes
2answers
108 views

iptables subdomain port forward

Hello i know i can setup iptables to forward to an other ip when a port is given Example: user enters domain.com and it shows site other user types domain.com:28015 and it connects to a game server ...
0
votes
1answer
26 views

port forward in INPUT level

I want to change the destination port of the ipv6 packet in the INPUT level. So I tried to use ip6tables with nat in the INPUT level but seems this command does not work # ip6tables -t nat -I INPUT ...
1
vote
0answers
71 views

Use Ubuntu Iptable to route public ip to pc in private network

I am currently set up a Ubuntu server as a Router which has two network interface. eth0 -> Connecting to public internet ( 10.10.1.78 ) eth0:1 -> 10.10.1.79 eth0:2 -> 10.10.1.83 eth0:3 -> 10.10.1.81 ...
1
vote
3answers
40 views

iptables catches on DENY but not on ACCEPT place prior to it in the chain

I have a weird problem with my iptables firewall: If I set two consecutive identical rules, the first is ACCEPT and the second is DENY, the incoming packet is denied (and logged as such). How is it ...
0
votes
0answers
18 views

equivalent of iptables rule in ip6tables

I m newbie in the iptables. I have the following iptables rules in the source code of a project iptables -t mangle -I PREROUTING ! -i br0 -p TCP --dport 45 -j MARK --set-mark 0x1000 iptables -t nat ...