Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
0answers
66 views

Forward all traffic from one Linux interface to another?

I have a virtual ESX interface "eth1" that I want to act as a gateway for connections, and then route all of the traffic from these connections out of my "eth0" (WAN) interface. Here are my ...
1
vote
1answer
154 views

Connecting my Xbox 360 to my Raspberry Pi 2 to use an OpenVPN connection

Here is my brief setup: Xbox360 Raspberry PI 2 running ArchLinuxARM (alarm) The raspberry pi's main ethernet port has a cable connecting directly to my main router The xbox has a cross-over cable ...
0
votes
0answers
51 views

Tor Middlebox: How to check if there is a DNS leak?

I created a tor middlebox. Laptop plus WLAN. Creates a WLAN AP all traffic from that AP should be routed into tor. But I am not sure, if the DNS requests are not leaked. How can I check that? This ...
0
votes
0answers
97 views

tor middlebox: How to route traffic through a socks proxy automatically? iptables routing wlan

I built a tor middlebox. It is an old laptop without screen, creates a WLAN and every traffic on that WLAN is routed into tor. my iptables script: iptables -t nat -A PREROUTING -i wlan0 -p udp ...
0
votes
1answer
312 views

ssh: connect to host * port 22: Connection timed out

I have CentOS 7 running on a VPS machine and after a computer restart, I could no longer SSH to it. $ ssh -v <IP> OpenSSH_6.6.1, OpenSSL 1.0.1e 11 Feb 2013 debug1: Reading configuration data ...
0
votes
2answers
119 views

Traffic redirection with Rasperry Pi router

I use a Rasperry Pi (running raspbian) as a wi-fi router. It redirects traffic from the Ethernet wire (eth0 - wire + ppp0 - L2TP connection, lx2tp used for it) to wlan0 (USB wi-fi dongle, hostapd used ...
2
votes
1answer
56 views

Connecting router traffic to sshuttle tunnel

I am using sshuttle to get cleanly out of a questionable hotel wifi connection. I have a little travel router and would like to use it as well, briding my laptop's sshuttle connection so I can connect ...
0
votes
0answers
83 views

CentOS as home network router: IPTables Port Forwarding failure

I have currently set up a home server with a CentOS 6.6 installation on it. The server has two NIC interfaces which I'm using it as my router and DHCP server. Here's a diagram showing the network ...
0
votes
0answers
40 views

NAT Rule for PPTP Port Forwading

I'm under a very heavy firewall where only very common ports such as 21 and 80 are open. I installed PPTP on my own dedicated server (a Debian Linux) and I`m trying to connect it using Windows, but ...
0
votes
0answers
19 views

https proxy setup in NAT-ed clients

I have network setup as follows: I have 2 PCs. A and B. A is connected to Internet, and A and B is connected by local network. B can also connect Internet through A by NAT setup. In A, the NAT setup ...
0
votes
0answers
24 views

Create a VPN tunnel from ethic to wlan0

I have a lan network of which all internet traffic has to be routed through a openVPN tunnel. I use a RPi, and have setup ethic with a DHCP server, and can connect clients. Currently I use a lan0 to ...
0
votes
2answers
64 views

iptables default rules understanding

What does the last part in the following rules means in term of traffic that is allowed in (dtp:domain, bootps) ? From my research I understand that bootps is bootstrap and dpt is destination port but ...
0
votes
0answers
27 views

IPTables and SIP Proxy-Authorization Header

Is it possible for iptables to check SIP packets for Proxy-Authorization headers, and if there's more than one header in a SIP packet, modify the packet so only the latest Proxy-Authorization header ...
0
votes
0answers
92 views

port forward from host to libvirt guest virtual machine that is bridged to the host nic

I am having no luck getting access from the outside to a http server running on my network in a Debian virtual machine that was created through libvirt. This what my network looks like: PC1: running ...
0
votes
0answers
80 views

Forwarding some ports and websites from “eth0” to “wlan0” with IPTables

I have eth0 and wlan0 devices in my work laptop. eth0 access the company's network and it comes with the whole firewall rules and so on. So I’m unable to use Skype, Google Hangouts and other things I ...
0
votes
0answers
78 views

Set up port forwarding on Ubuntu with ufw

I want to route HTTP traffic from port 80 to port 8080. I added the following rule to /etc/ufw/before.rules -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080 But it works only if direct ...
0
votes
0answers
61 views

iptables - How to mirror all ports from one IP to a single port on another IP

I would like to set up IP tables on my router to mirror traffic on all ports from 192.168.1.30 and send it to 192.168.1.10:5860 I think I need to combine the two commands below, but I'm at a loss. ...
1
vote
0answers
281 views

DDWRT - Virtual Interface - firewall command - RDP

I have DD-WWRT flashed on my Linksys e2500v3 router. I added virtual interface to create a guest wifi network that would have access to the internet, but not to the private network or router. At ...
0
votes
0answers
33 views

How to see who's blocking my internet connection? fail2ban?

I was just running apt-get dist-upgrade from a distant ssh console when I lost the connection. I would like to know which service blocked my connection. I know fail2ban is sometime a bit flaky, but ...
0
votes
0answers
104 views

Why CSF blocking all traffic?

I've installed CSF firewall with Directadmin. when the firewall is running, it blocks all the incoming and outgoing connections. My iptables -L -n: Chain INPUT (policy DROP) target prot opt ...
0
votes
0answers
136 views

Unable to Telnet to the Linux SUSE from windows with port 50000

Firewall has been disable at Linux SUSE server, port numbers from 50000:60020 has been enabled. I can able to ping the server able to telnet using IP. When I give port 50000 or 60000 in my telnet ...
0
votes
0answers
57 views

iptables TCP flags

I'm beginner with iptables and networking so please excuse me for such dump questions. I found in Internet part of filtering malformed packets: /usr/bin/sudo /sbin/iptables -A tcpchk -p tcp ...
1
vote
0answers
95 views

iptables TCP flags

I'm beginner with iptables and networking so please excuse me for such beginner questions. I found on the Internet part of filtering malformed packets: /usr/bin/sudo /sbin/iptables -A tcpchk -p tcp ...
0
votes
0answers
154 views

Windows firewall rule order?

I'm trying to setup Windows Firewall to allow all traffic except a large list of IP ranges connecting to/from a specific application. For testing, I set up two rules: Allow all traffic (no ...
0
votes
0answers
57 views

+Merlin FW / Port Forward via IPtables?

I have 2 WiFi Thermostats, Heatmiser, that i can control remotely, from LAN without issues, but only one from WAN. The thermo have a fixed port that cannot be changed and there is an App thet can be ...
0
votes
0answers
36 views

rsyslog loses messages from firewall

I am trying to make rsyslog to log messages from iptables MASQUERADE. I have iptables LOG rule in nat table and PREROUTING chain before the MASQUERADE rules. The actual iptables rules: iptables -t ...
0
votes
1answer
117 views

MaraDNS- Unable to forward DNS queries

I tried forwarding DNS queries to Google DNS but it is not working. Below is the content of my /etc/mararc file: csv2 = {} csv2["example.net."] = "db.example.net" csv2["google.com."] = ...
1
vote
1answer
35 views

Cannot access DNS from external network

I have setup a MaraDNS instance on CentOS 6.5. I can access the DNS records from local machine—on which MaraDNS is installed—by doing nslookup but cannot access the DNS server records from Internet on ...
1
vote
0answers
166 views

Configuring iptables for guest WLAN in DD-WRT

I'm constantly failing to get a guest WLAN in DD-WRT working. I can connect to the second SSID and get an IP address of the second DHCP server range. But I cannot connect to the internet. I followed ...
0
votes
0answers
66 views

Route Specific URL to another interface on Linux

I have a Raspberry Pi Model B running Raspian. RPi is in between of my local network and Internet Router (as gateway; so all traffic is passing from RPi's eth0 interface to virtual interface eth1). I ...
0
votes
0answers
16 views

Determining whether a port is closed (no one is listening) or iptables reject my host

Can I tell whether the service I'm calling has a reject rule in its iptables or it doesn't listen on the port I'm calling? it seems that I always get icmp port unreachable
0
votes
0answers
44 views

iptables - Cannot redirect with 443 (Https) port

I'm using this command to redirect all web traffic (http and https) to my local server iptables -t nat -I PREROUTING -p tcp --match multiport --dports 80,443 -j DNAT --to 192.168.11.100 But when i ...
0
votes
1answer
92 views

Using ppp0 via VPN for everything but ftp

I have an ubuntu server I use to wget certain files from the internet via a VPN. I have set the VPN up using PPP0 and currently adjust the route like this: sudo route add default ppp0 Everything ...
0
votes
0answers
27 views

iptables - How to remove connection tracking

I'm using this command for redirect all web traffic (http) into my local web server iptables -t nat -I PREROUTING -p tcp --dport 80 -j DNAT --to 192.168.11.100 Then i test, access a website and got ...
0
votes
0answers
43 views

Log and drop packets with iptables

I am using these two alternatives to log packages dropped with iptables: -A INPUT -p tcp --dport 21 -j LOGNDROP # We do not have FTP # The LOGNDROP chain: log messages (rate-limited) and drop all ...
3
votes
2answers
431 views

SSH reverse tunnel into Docker container

I need to xdebug something that fails on the server in a docker container and from my laptop I have ran ssh -R 9000:localhost:9000 server and verified the tunnel by telnet localhost 9000. So far so ...
0
votes
1answer
235 views

iptables failed with “ iptables v1.4.21: Couldn't load match `-d':No such file or directory” message

I am running kernel 3.14.18 and using iptables 1.4.21, built with these options --static-enable --disable-shared. When I run this command: /sbin/iptables -A PREROUTING -m -d 127.3.0.2/24 -j DNAT ...
0
votes
2answers
38 views

How configure requests from other ports to port 443?

I am trying to configure my first https, and i think i get it, but there is a problem: the site wont open in http, just https, because of this, i want redirect everything to https. I am using ...
0
votes
1answer
272 views

How to allow only subnet for port with iptables

What i am trying to do is to DROP any packets to specific UDP port, except those one from my secured subnet 10.8.0.0/24. iptables -t nat -A --src 10.8.0.0/24 -p udp --destination-port 63210 -j ACCEPT ...
0
votes
0answers
10 views

How can I see the currently installed netfilter hooks?

Not just the iptables, is it possible to see the currently installed netfilter hooks in Linux PC? Such as the home-made kernel modules that installs netfilter hooks for someone's own filtering rule?
0
votes
0answers
139 views

Open ports with iptables — still closed

I'm trying to open some ports for a gameserver, which is running on my Linux vServer (Ubuntu 14.04 LTS 64bit). The game needs the following ports: 16261 (UDP) 16262 (TCP) // Player 1 16263 (TCP) // ...
0
votes
0answers
47 views

Connectivity from different network segment

I have 3 machines 10.10.3.1 Windows # srv1 10.10.3.2 Lubuntu # srv2 10.10.200.1 Windows #cli1 network masks are 255.255.255.240 I can succesfully ping from cli1 to srv1 srv1 to srv2 srv2 to ...
0
votes
0answers
144 views

Connecting to mysql server at 127.0.0.1:3307 with iptables port redirect

I have a ruby application which, for various reasons, connects to a mysql server running at 127.0.0.1:3307. This works perfectly on the server side, but now I want to run this application on my ...
0
votes
0answers
62 views

IPTables NAT to webserver how to forward real remote IP

I have a simple setup where I host a webserver in my local LAN 172.16.0.0/27, port 80. It is connected to my DD-WRT router that has a publich IP (direct Internet connection), let's say 1.2.3.4. I set ...
0
votes
2answers
300 views

How to use iptables to allow traffic only throug ONE SPECIFIC VPN

I'm trying to allow all traffic from my Banana PI running Lubuntu to only go to my LAN or otherwise through an VPN Server. I'm following this guide: ...
0
votes
0answers
17 views

Iptables Port Forwarding To Different IPs Based on Port [duplicate]

On a CentOS 6 server with an IP address of 172.16.1.10, how can I configure iptables to route traffic destined for 172.16.1.10:80 to 192.168.1.10:80, and traffic destined for 172.16.1.10:8080 to ...
-1
votes
1answer
172 views

DD-WRT Wifidog - Redirect isn't working

I have flashed a ASUS AC-RT56U router with DD-WRT version V24-preSP 2201412-22-2014-r25697. Now I want to make it into a hotspot with wifidog TO PLACE IN A SMALL BUSINESS (FITNESS CENTRE) I have ...
1
vote
1answer
142 views

How to redirect TCP traffic from one virtual machine to another in Linux?

What is the simplest way to redirect all TCP traffic from one virtual machine to another in Ubuntu Linux and reverse? And what type of connection I suppose to use in VirtualBox?
0
votes
0answers
143 views

How to split traffic between vpn and ISP

I have vps with configured open VPN server and my router with openWRT and openVPN client. In this moment I can route all my traffic via vpn or ISP. But I want route some connections (for example on ...
0
votes
1answer
94 views

Routing 6to4 packets through NAT

I have a linux router(dd-wrt w/o ipv6 module, no space for that) and a linux PC(Arch linux). I'm trying to setup my router to forward 6to4 packets(protocol 41) to my PC and setup the tunnel on it. ...