Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

2
votes
1answer
157 views

Routing traffic around VPN

I recently setup a OpenVPN client on my HTPC, however once I connected to the VPN server I was no longer able to remotely SSH or connect to the other servers I had running on the HTPC. I followed ...
2
votes
1answer
431 views

How to set up a hotspot with socks5 proxy

I have a laptop with linux installed on it. The laptop has two network interfaces: eth0 and wlan0. Normally I surf the Internet through eth0, and I've successfully set up a hotspot in linux for my ...
2
votes
0answers
329 views

Modify incoming packets before forwarding in Linux

I’m using a Linux (Debian based) system on which IP forwarding is enabled (/proc/sys/net/ipv4/ip_forward is set to 1). I can read the incoming packets using a raw sockets program, but I want to modify ...
2
votes
1answer
667 views

Make application use specific network interface

I have an openvpn connection and I need it to work only for one application, this app uses an specific local port. I used route-nopull on my openvpn config file and then: ip route add default via {P-...
2
votes
1answer
137 views

Iptables redirecting

I have set up a Personal hotspot using Hostapd. But this hotspot is not connected to the internet but I do have Apache installed on it. What I am trying to achieve is to redirect all the clients (that ...
2
votes
1answer
363 views

ip6tables: how to handle periodically changing prefix?

My ISP provides me with native IPv6 (unfortunately DS-Lite for v4) and I'm using SLAAC for the clients in my local network behind a broadband router. As I don't trust the router (which is configured ...
2
votes
1answer
86 views

How to apply ipfw rules to domains that resolves to multiple IPs?

Suppose I wanted to use ipfw to throttle uploads to youtube. The uploads are made to upload.youtube.com but this domain resolves into multiple different IPs (which also appear to change over time). ...
2
votes
1answer
235 views

IPSet with IP6Tables ERROR

Can someone please solve my headache and tell me how to fix this? [root@www ~]# ip6tables -I INPUT -m set --match-set blacklist6 src -J DROP ip6tables v1.4.7: Couldn't load match `set':/lib64/...
2
votes
3answers
7k views

Limit incoming connections using iptables per IP

I need to limit access to some port per IP. Let's say 5 connections per minute - not more. I've seen iptables recent, connlimit and limit, but all of them are not fitting exactly what I need. ...
2
votes
1answer
1k views

How to forward ports through ssh and nat to another machine

I have a problem when using ssh port forwarding and nat simoultaneously. Situation: Machine A runs a webserver on port 8080 Machine B is a raspberry pi which works like a little router. It has two ...
2
votes
1answer
321 views

Connected to vpn but can't connect to internet

I am using ubuntu 12.10 as a vps. And I am trying to configure a vps server on it. I can connect to the vpn but just can't get internet access. Maybe because I don't know how to write a iptables. ...
2
votes
1answer
2k views

Synergy client won't connect, despite open port?

I want to use a Debian KDE desktop computer (network name bradbury) as the server, and a Windows 7 laptop (network name Clarke) as the client. I have used this setup before without problems, but then ...
2
votes
0answers
163 views

Determine if an uplink interface is usable

I have a firewall system that is served by two uplinks to different ISPs. I'm using shorewall to manage the firewall; it load-balances traffic over both interfaces with connection tracking. All that ...
2
votes
1answer
366 views

How does uTorrent can automatically forward port through Linux Net Filter based firewall?

I have dilemma: How it is possible that uTorrent shows on my internal machine with internal IP, that my connection is OK (green check in the bottom right of its window), while I never forwarded any ...
2
votes
1answer
616 views

CONNMARK on rewritten packets

I have a host, on which I rewrite saddr and daddr of IP packets coming to it, this is done by the program, employing libnetfilter_queue. Basically it acts like proxy. For example, the packet comes ...
2
votes
2answers
3k views

How can I port forward an LAN port to a WAN Ip with iptables?

Using iptables on my router (dd-wrt), I'd like to forward requests to the router on port 64738 from the LAN to an IP (192.168.10.14) on the WAN. This is the opposite of the norm (forwarding a request ...
2
votes
0answers
470 views

Limit bandwidth on HTTP downloads based on file size

Is there a way to limit lets say in iptables or any proxy solution/software if a user is downloading a filesize that is greater than lets say 20MB it will limit his entire download at 2KB/s? ...
2
votes
1answer
235 views

amule, Fedora 14, iptables

I need to set iptables rules for aMule, but I am not sure which one are the right ones. Googling around, I have seen something like: iptables -I INPUT -p tcp --dport 4662 -j ACCEPT iptables -I ...
2
votes
1answer
323 views

Why does Firefox need a loopback connection?

I was playing around with firewalls and iptables. When I blocked any traffic except HTTP and DNS I was able to establish a connection to google.com via wget google.com. But I wasn't able to open ...
2
votes
0answers
356 views

Centos iptables blocks after reboot

I have a Centos5 installation with kvm on my server. I am using nat portforwarding to ssh my virtual machines. I have several iptables rules and saved then in /etc/sysconfig/iptables. After reboot, I ...
2
votes
1answer
292 views

dd-wrt: Keep source ip after port forward

I just started using dd-wrt on my wndr3700, but now all my incomming connections to a server inside the network gets the same source ip as the router. How can I change this back so I get the real ...
2
votes
1answer
5k views

Reverse Proxy for TCP (RDP, VPN, etc) and HTTP

I have a domain that points to my ISP assigned IP though a CNAME (cname goes to my noip address incase my ISP decides to change the IP), I would like to route different subdomains to various IP:PORT ...
2
votes
1answer
2k views

Match multiple strings in iptables

I have 2 strings, and i wish to queue the packet if it contains both the strings ( something like ("jsh"&&"gjhyg")), i tried following ways, but they don't seem to work: sudo iptables -A ...
2
votes
1answer
2k views

Gateway on a virtual network interface used by LXC guests

I'm currently having some problems with configuring a gateway for a virtual network interface. Here is what I've done : I created a virtual network interface : # brctl addbr lxc0 # brctl setfd lxc0 ...
2
votes
3answers
4k views

iptables firewall only allows internet traffic if source port of 80 is allowed

I am configuring an iptables firewall, currently just to allow http and https traffic. It is working but under a particularly strange rule - I must allow incoming connections with a source port of 80....
2
votes
2answers
1k views

Using iptables to selectively route outgoing requests?

I'd like to set up my Dd-WRT firewall so that it uses the VPN service from a VPN provider to access a bunch of destinations and normal route foe all other requests. In detail: giganews.com would be ...
2
votes
0answers
549 views

Why does my Tomato router seem to behave badly as time passes

I've set up a Firewall script on my Tomato router (a WRT54G 2.0, actually) that seems to behave correctly at start, but after one or two days, it seems that the script does not work anymore... The ...
2
votes
1answer
4k views

DD-WRT firewall rule configuration

I'm using DD-WRT on my linksys router. I want to limit each user on my network to 200 connections at any given time. Does anyone know the rules I enter the firewall in DD-WRT admit panel. I tried ...
2
votes
4answers
480 views

Block all but http traffic on a network interface

I've got two network interfaces on an Ubuntu machine which go out to two different networks but both have internet gateways. I need to limit it so that any outgoing http requests it makes (ie ...
2
votes
1answer
298 views

Restrict the number of http and https connections from a specified IP address to ten connections per minute

How I can restrict the number of http and https connections from a specified IP address to ten per minute usingiptables commands? I’ve tried this but it is not working: iptables -A INPUT -s 192.168....
1
vote
2answers
11k views

Block all ports except SSH/HTTP in ipchains and iptables

How can I block all ports except ssh (port 22) httpd (port 80) using iptables and iphains?
1
vote
2answers
1k views

How to “shut off” all networking on Linux from bash?

I'd like to write a bash/shell script that "turns off" the machine's ability to communicate over it's network card, effectively shutting down all networking. From the command line: # To turn all ...
1
vote
1answer
42 views

ip6tables causing slowness

When running commands like ntpq -p or apt-get update it takes a very long time to display the results. If I remove all the ipv6 rules, everything works fine. I checked syslog, and there's no iptables ...
1
vote
2answers
53 views

Need an explanation of iptables rule

Can anyone help me understand the below iptables rule? iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP
1
vote
1answer
4k views

Difference between iptables default policy to `DROP` and inserting a seperate policy in input chain to DROP all connections

I'm trying to DROP all incoming connections to my server, except from particular networks. At the same time I want to keep all outgoing connections from my server to external network (any network over ...
1
vote
1answer
307 views

How iptables behaves on timezone change?

I have doubt how iptables keep changing the info in iptables when timezone is change. I am using iptables s v 1.4.8 I have blocked one IP with following details # date Thu Jun 6 12:46:42 IST ...
1
vote
3answers
1k views

iptables LOG actio writes to STDOUT

when I use LOG action in some chane of iptables rules, I get the output both in STDOUT or STDERR of the xm console and in /var/log/messages. Is there way to make iptables to write only to log ...
1
vote
2answers
2k views

Openvpn connects and responds to ping but no internet access

I have an openvpn server running on raspian and a tunnelblick client on osx. I can connect to the VPN just fine but I have no intenet access. The server responds to ping just fine and the port is open ...
1
vote
2answers
203 views

How to check/adjust SSH server on embedded board

I'm currently having difficulties connecting to an embedded board from my Linux machine through ssh. The embedded board is a FOX G20 V with a Linux OS. I've tried to connect to the board through ...
1
vote
1answer
344 views

Per application rules in iptable

Is there possibility to add rule via iptable for specific process name? Good explanation of why I need it is here: "Under Windows, this helps making the PC more secure. There are many ...
1
vote
1answer
2k views

How do I block every connection except vpn and ssh without endangering the state of my vps?

I have some vps space but I get alot of scans based on what I see in iftop. I tried some iptables stuff but it gets tiring and useless to put all the ips that I see in the logs. I am wondering about ...
1
vote
2answers
2k views

Howto compile a kernel module on CentOS [required packages]

What yum commands do I need to get available packages installed on CentOS to build a iptables MATCH kernel module.
1
vote
1answer
234 views

Block port 111 on centos 7

I am using a server with centos 7 running kvm/virtualization, I access using VNC server. Today I received an warning about my server being used to attack other server using port 111, I am completely ...
1
vote
1answer
27 views

How to apply iptables rules for my OpenVPN?

I'm trying to use iptables rules, but it doesn't work. In my case I want to block specific ip address, so that my client can not visit specific website. I'm using VPS and my ifconfig look like this: ...
1
vote
2answers
67 views

Hairpin NAT with dynamic WAN IP

I have a dynamic WAN IP so if it changes my iptables will no longer apply. Here is my working hairpin nat, where x.x.x.x is my WAN IP br0 - LAN eth1 - WAN -A PREROUTING -d x.x.x.x -p tcp --dport ...
1
vote
1answer
92 views

Limit a range of ip addresses to specific ports using iptables

I am using iptables v1.4.21 on linux. I am trying to limit traffic for DHCP clients 10.0.0.50-10.0.0.100. I would like them to only have access to ports 53,67,80,443,9091,32400 using TCP and UDP. But ...
1
vote
1answer
123 views

Iptables newbie pain

I got a host (WINDOW7) and a guest (DEBIAN7.7) virtualized by VirtualBox. I configure an eth1 interface as host-only. My host can ping the guest and vice-versa, host can connect via ssh too. Now I ...
1
vote
3answers
463 views

Configuring IPTables to exclude webhost from VPN tunnel

I have a Raspberry Pi running as a server for my webhost. Raspberry pi is connected to a VPN service 24/7. Due to this, I am unable to connect to my webhost using my public IP address issued by my ...
1
vote
1answer
766 views

Block traffic to LAN but allow traffic to Internet (iptables)

On my home network I am setting up a CentOS server that will be used by about a dozen or so for educational purposes - e.g. learn how to use the Linux shell and host websites, among other things. I ...
1
vote
1answer
56 views

Should my server ever need to directly communicate with the NAT gateway?

What I mean by ``directly communicate'' Does it ever need to receive packets with the gateway's IP address as the source IP address, or send packets with the gateway's IP address as the destination ...