Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
0answers
71 views

Connections from virtual host to internet OK, but to rest of LAN, broken

In a notebook running Ubuntu 14.04 I have installed VirtualBox and created a virtual server with Windows 7. The PC is connected to a 192.168.x.y LAN. The virtual server is in a host-only network with ...
0
votes
1answer
27 views

Config to make only pcap receive packet

I am trying to use pcap to modify the packet before sending it out. For example, I have a server (running Ubuntu) listening on port 8000. Before it sends out SYN-ACK for incoming SYN packet, I am ...
0
votes
0answers
191 views

iptables snat does not change source IP

I am on ubuntu (with IP 10.0.0.1) trying to snat packets going out from port 9090. I want to change the source IP to 10.0.0.2 I have added the following rule through iptables: # iptables -t nat -A ...
1
vote
1answer
55 views

Debian 7 - iptables 'filter' not supported?

Am attempting to forward/ masquerade connections from WLAN0 to ETH0 as follows: sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --state ...
0
votes
0answers
19 views

Packets are delivered to the host, which has the (dst) IP, but the application bound to the IP/port never see the packets

I have an iMac and a dd-wrt router. On the Mac side of things I have a proxy executable that I wish to use, but I've been unable to figure out how to make pf forward packets to the same host. ...
0
votes
1answer
92 views

IpTables -j REJECT to instantly block the loading on user browser

I have been searching for a solution to notify the browser on user that the request is Rejected so stop loading it. Because I have blocked facebook and every page that have a facebook plugin is ...
0
votes
0answers
85 views

Cannot SSH on machine behind NAT. DD-WRT router

I'm trying to remote access my home Debian from my other office. The home Debian is behind a DD-WRT router, connected from a ADSL modem (Yeh, it's dynamic IP but I have someone to tell me the WAN ...
1
vote
3answers
217 views

How to block network traffic on ubuntu gateway via arp table

I have a network with 80 PC and a ubuntu 12.04 as GW. For security reason I want to limit the Computers connected on this network using an ARP precompiled table. In other words I want a tool that ...
0
votes
0answers
152 views

Routing specific port ranges to specific gateway on Asus AC68 router using iptables and ip route

Linux noob here. I was hoping someone could help me with configuring some routing rules on my router, an Asus AC68. The router is connected to two gateways, wan0_gateway and wan1_gateway. I have ...
0
votes
0answers
33 views

Why is the TCP open but not the UDP?

I'm setting up a game server and I have a bunch of ports forwarded already (all in use). So I'm putting one into /etc/ppp/firewall-masq, which is full of iptables rules. The game server is served by a ...
0
votes
2answers
90 views

IPTABLES NAT port forwarding

I'm trying to setup a Linux box to act as a very simple 2 NIC router. I've read over the instructions on the bot Archlinux and Gentoo wikis and gotten the same result, masquerading works but not port ...
1
vote
0answers
25 views

Preserve NAT mappings across reboot

My Linux router is able to reboot and reconnect all network interfaces pretty fast (~10 seconds, thanks to systemd and a SSD disk), and comes up with the same IP addresses. Unfortunately the reboot ...
1
vote
1answer
46 views

Trouble with last DROP rule in iptables

Let's say I want four ports to be opened for any incoming packets so I made this ruleset: #> iptables -L -v Chain INPUT (policy ACCEPT 20 packets, 1190 bytes) pkts bytes target prot opt in ...
0
votes
0answers
54 views

iptables do not block all traffic i want to mysql port

Need to block all incoming traffic to port 3306 but two ranges. The thing is I can connect from other ranges anyway!. Think my drop rule is ok. Why is this? ]# iptables-save # Generated by ...
0
votes
0answers
38 views

Port bridge with iptables

is there a way to achieve the same thing than bidirectional socat functionality with nc mkfifo backpipe nc localhost 42042 0<backpipe | nc localhost 1042 1>backpipe But only by using iptables ...
1
vote
1answer
122 views

Make application use specific network interface

I have an openvpn connection and I need it to work only for one application, this app uses an specific local port. I used route-nopull on my openvpn config file and then: ip route add default via ...
1
vote
1answer
38 views

Filtered port with virtual server setup on a NAT

I have a Symphony SY602 ADSL router and I want configure a dynamic DNS to access my system remotely. I made a NAT virtual server in routers configuration and this is what I configured: Server Name ...
0
votes
1answer
99 views

enable internet on openvpn tun - azure linux

I am trying to do this with OpenVPN TUN on an Azure Linux instance: -=Android Client=- --> -=VPS=- --> -=Internet=- Client connects but no internet access. Iptables commands iptables -t nat ...
0
votes
0answers
16 views

Linux: Can user applications generate icmp messages?

I am using TOR and setting up a transparant proxy depending on users. I had trouble to constrain ICMP messages on UID. But I found an explanation for that on server fault. For the sake of privacy: is ...
0
votes
1answer
40 views

Why does iptables port aliasing work with only a single rule?

I have a service running on a particular port, but in order to make it accessible via a more memorable port as well as the normal port, I added an iptables rule that acts as a port alias: iptables -A ...
0
votes
0answers
89 views

Open firewall port on Mac OS X

I need to open port 8181 on my Mac OS X. On Linux, I would do: iptables -t filter -A INPUT -p tcp --dport 1664 -j ACCEPT iptables -t filter -A OUTPUT -p tcp --dport 1664 -j ACCEPT How do I do this ...
0
votes
1answer
29 views

Can't connect to Monet DB hosted in RHEL5

I'm not a sysadmin, much less a RHEL sysadmin, but for some reason I have to make a few config changes in a couple RHEL servers. I have to set up a couple services in different RHEL servers and they ...
0
votes
1answer
53 views

How can I configure one of the ubuntu desktops as “dhcp-relay-agent”?

How can I relay DHCP requests from LAN to WAN in linux so that the desktop connected to the LAN interface can have Internet access from WAN? Note: WAN has Internet access.
0
votes
0answers
31 views

MASQUERADING a veth

I want to bind an application to a wifi interface that might loose connection and receive a new DHCPed IP on reconnect. The problem is that the application can only be binded to an IP address and not ...
0
votes
0answers
43 views

How do I share my wlan0 internet connection to eth0 using command line and config files?

I understand how it is done using the GUI (1, 2, 3), but I need to do this manually using Linux tools/commands (iptables, eatables ...). What are the configuration steps and commands to use, ...
0
votes
0answers
36 views

Why am I getting “FATAL: Ident authentication failed for user ”root“” after changing rails server to port 81

I was running my rails app on the default port of 3000. I opened port 300 with: sudo iptables -A OUTPUT -o eth0 -p tcp --sport 3000 -m state --state ESTABLISHED -j ACCEPT and sudo iptables -A ...
0
votes
0answers
34 views

SSH tunnel data from hostapd server to remote server

I've set up a small raspberry pi with hostapd to be a wireless access point. I'd like to have all connections from it ssh tunneled to a server in another country. I'm not overly sure how I'd do this, ...
0
votes
0answers
60 views

Route all packets on port 80 from inside a vm to kali linux on another vm

I'm trying to route all packets on port 80 to kali linux so that I can ssl strip them but I cannot see to setup the iptables correctly to force all the packets to go to my other Vm. [ Virtual Machine ...
0
votes
1answer
79 views

iptables on debian blocking git pull, http api requests etc

I am using IPTables on an API server to block all incoming traffic except for SSH, HTTP and HTTPS. I need to have full access on the loopback interface to run beanstalkd amongst other things, and need ...
1
vote
1answer
263 views

How to force Google safesearch on entire network

I've a problem filtering web searches on Google domains. Currently I've a linux openVPN Server running with openDNS "family block". I can block a lot of websites with dangerous content and it's ok. ...
0
votes
1answer
69 views

Why my iptables configuration for port-knocking does not work?

I implemented the following iptables rules on my test server for a course. The firewall shuts down and I cannot access port 22. However, after knocking on the ports 1111, 2222 and 3333 in that order - ...
1
vote
1answer
1k views

OpenVPN won't connect from remote location

I set up OpenVPN on a linux machine in my basement. I'm able to connect from my Windows 8.1 machine without an issue when I'm connected to the local network. In this instance, I set the config file ...
0
votes
0answers
16 views

iptable definitions for routing and defence

I'm attempting to configure a firewall on my laptop that allows for routing. The main trick is, I don't want to allow for connections to be made that do not fall under the ESTABLISHED,RELATED ...
0
votes
0answers
65 views

Port mirroring without TEE

I have a home router running OpenWRT 12.09.1. The package list for this version does not have iptables-mod-tee. I am familiar that I could set up a port mirroring using: #-A POSTROUTING -t mangle -o ...
0
votes
1answer
36 views

Trying to configure iptables on Slackware 10

I am trying to configure iptables on a Slackware 10 machine. This Slackware version is required in my class - so I cannot upgrade it. After compiling it, I want to configure iptables - however, it ...
0
votes
1answer
121 views

Conntrack gets incorrect forwarding rules for outgoing protocol 41

I'm trying to forward protocol 41 (ipv6-in-ipv4) for an HE tunnel through a WRT54G running Tomato 1.28. Tomato 1.28 is running a 2.4 kernel that knows absolutely nothing about protocol 41, except that ...
1
vote
1answer
173 views

allow incoming ssh with openvpn client

I have set up an OpenVPN client on my home router. The moment the tunnel goes up, I can no longer ping my router from the internet using its WAN_IP. I would like to allow certain incoming connections ...
0
votes
1answer
85 views

Using IPtables to redirect IP address range to port range

I'm trying to set up an IPtables rule that will forward all packets to a /22 range to a single IP and port for debugging purposes. Based on the question here Using iptables to redirect ip address I ...
1
vote
0answers
28 views

How can I efficiently filter Dos packets? [duplicate]

I have recently been the victim of some Dos attacks. The facts : I received a very high amount of packets saturating my connection and preventing me from accessing the Internet during one hour ...
0
votes
1answer
150 views

Iptables to forward HTTPS traffic to remote HTTPS proxy

My goal is to use Iptables to take all traffic going to my server on port 443 and forward it to a remote HTTPS proxy server. So basically if I was to use my ip of 192.168.1.142:443 as a SSL proxy it ...
0
votes
0answers
36 views

Open ports for Age of empires in ubuntu router using iptables

The purpose of this question is to learn how to correctly use iptables. As I am currently living in the dormitories in the University and I am using a small netbook as a router to provide wifi in my ...
0
votes
0answers
29 views

Special type of DMZ?

So I have a standard modem-router setup all great to go, my Modem gives an IP Address from my provider via DHCP according to my Mac address. All is good. However, I now want to expose a new virtual ...
0
votes
1answer
58 views

Set block time with iptables

I have the following rules in ufw, for iptables: -A ufw-user-input -p tcp --dport 80 -m state --state NEW -m recent --set -A ufw-user-input -p tcp --dport 80 -m state --state NEW -m recent --update ...
0
votes
1answer
126 views

Will an inbound iptables rule in ddwrt on port 443 break https?

I want to run a vnc repeater service on my home ddwrt router. Due to the possibility of friends/family asking for support in unknown network environments, I'd like the host-repeater application to run ...
0
votes
1answer
73 views

No internet through OpenVPN

I am having trouble with my OpenVPN setup. I have a Linode box with an OpenVPN server installed on it and I managed to get Tunnelblick to establish a vpn connection from my mac. I followed this guide ...
2
votes
1answer
2k views

IPTables module ip_tables not found for root

We got a custom build Linux distribution from a vendor, which is not shipped with iptables enabled. root@xxxx:~# iptables -L modprobe: FATAL: Module ip_tables not found. iptables v1.4.21: can't ...
0
votes
0answers
83 views

Iptables redirection to squid proxy server

I'm trying to setup filtering through a squid proxy however I'm having trouble getting my router to send all traffic to the proxy using iptables. I've currently got it setup such that there is the ...
0
votes
0answers
45 views

Iptables intercepting traffic

I have 3 servers on the network (Server 1: 10.0.0.1, Proxy server: 10.0.0.2, Server 3: 10.0.0.3) and I would like to intercept the traffic going through the proxy server from Server 1 to Server 3. ...
0
votes
1answer
96 views

Access lxc container services from other lxc containers via host

I've got a laptop with Ubuntu 14 Desktop. The laptop has WLAN connection to my LAN and is managed by network manager. Of cause, the laptop a nic (eth0), too, but it is not connected. I use this laptop ...
0
votes
1answer
24 views

iptables - I'm losing control over the box by adding new rule to the config

My set up is the following: Internet uplink (200Mbit) DMZ (1GB ethernet) Internal network (1gb internet) Log interface My gateway is serving around 600 clients with 1400 iptables rules in ...