Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
0answers
51 views

Web proxy on LAN - iptables and Win Firewall

My LAN is simple: Router: C.C.1.1 Win 7 laptop: C.C.1.2 RPi: C.C.1.3 "C.C" = 192.168... The Win 7 laptop is connected via its WiFi interface. I have connected another machine (let's call this ...
0
votes
1answer
564 views

Centos 6 server does not open ports

So after some battling and struggling with the firewall, i see that I may be doing something or the firewall isnt responding correctly there is has a port filter that is blocking certain ports. Okay, ...
0
votes
1answer
692 views

debian gateway using iptables

I am having problems setting up a debian gateway server. My goal: Having eth1 the WAN interface. Having eth0 the LAN interface. Allow both ports 22 (SSH) and 80 (HTTP) accessed from the outside ...
0
votes
1answer
95 views

iptables FORWARD rule

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.1 and ...
0
votes
1answer
289 views

Can't ping through default gateway

I have the following configuration: Routing table on M3 is: Destination Gateway Genmask Flags MSS Window irtt Iface 0.0.0.0 192.168.2.1 0.0.0.0 UG ...
0
votes
1answer
152 views

redirecting traffic from a network interface to dansguardian

I have setup a Squid + Dansguardian parental control at home. I connected a WIFI router to the Ubuntu machine and share that network for my kids' mobile devices. The parental control works fine on the ...
0
votes
0answers
205 views

SCP over NAT stalls at 2112KB

I have two systems (A and B) on different subnets, with one dual-homed box (C) that can see both. I use iptables DNAT on C to port-forward SSH to B, so that A can run ssh -p 12345 hostC to connect to ...
0
votes
1answer
86 views

NM+iptables: How to forward port to shared wired connection?

I connect to my wireless network through NetworkManager. In addition I have another computer connected to the first one through ethernet. I'm using NetworkManager to share the wireless connection of ...
0
votes
1answer
209 views

Understanding how dnat works in iptables

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.3 and ...
1
vote
1answer
1k views

Iptables redirect to localhost?

Suppose I have a network with a server routing all connections from inside the network to the Internet. How can I set up iptables so that instead of routing incoming connections to the Internet, it ...
0
votes
1answer
275 views

Redirect PROXY traffic to test box using IPTABLES

Marked this as answered. I'm going to pass on trying to get this to work. It was only for testing. I'm currently using a proxy server (squid) that's listening on port 8080. Users' browsers are ...
1
vote
3answers
472 views

linux routing outbound port 80 traffic via ssh tunnel, iptables, or a simple route

I have two hosts, A and B. Host A hosts services on port 8080 and has outbound internet firewall rules allowing port 80 and 443 access to Host C. Host B is on the same subnet as Host A. Host B is ...
0
votes
3answers
249 views

Can't ping after ip change

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.1 and ...
0
votes
1answer
2k views

How do I get an iptables redirect to survive a reboot on SuSE 11?

I've set up iptables to forward from port 80 to port 8090: iptables -t nat -I PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8090 However the redirect is gone after rebooting. What's the ...
0
votes
3answers
110 views

iptables rule to block traffic not specified in all other rules

Is there a way to add a rule in iptable to block traffic not specified/covered in all other rules ? I know that we can use ! to block specific ports and ip addresses but there are just too many rules ...
1
vote
0answers
66 views

Define IPTABLES rule

I am working with a linux based UTM appliance and have some disagreement with the client on the operation. THere is a standard GUI to configure port forwards in the firewall but for some reason he ...
1
vote
1answer
212 views

Adding a custom SSH port to Ubuntu 12.04 LTS through UFW

I am trying to configure a Ubuntu 12.04 based VPS and I have changed my ssh port from 22 to 803 and everything worked fine. After this I've installed UFW and now I can't login using SSH. Before I ...
0
votes
1answer
108 views

CentOS 6 service iptables panic

me and my friend were doing some firewall configs and in the meanwhile he thought it was a good idea to type "service iptables panic". Now we cannot put the firewall back on the original state ...
1
vote
0answers
213 views

iptables load balancing for TLS with request routing on the same connection

I am trying to set up iptables rules for TLS connection. I have three internal IP in my machine and I route requests coming on public IP at port 443 to each of these internal IP in RR. -A PREROUTING ...
0
votes
0answers
60 views

Let everything except SSH/VPN use a VPN-Connection, but keep SSH working

Given the latest revelations about the size of Internet surveillance, I decided to route all my traffic trough an out of country VPN. I set the OpenVPN client up on my Router (Asus RT-N56U using ...
0
votes
2answers
101 views

Server can't be accessed

I have a server I rent from OVH and I rebooted it and now I can't connect to it, OVH responded with "The server has started (login is requested on the screen) but inaccessible by the network (not ...
1
vote
1answer
139 views

Disable SSH remote tunneling

I need to restrict SSH tunnel functions. Users should not be allowed to create remote tunnels but only tunnels to localhost. I tried to setup the whole thing in the SSH configuration but I can only ...
1
vote
0answers
81 views

nc connection refused even on loopback

I'm working on an embedded linux system, which appears to be networked correctly and is running ssh (dropbear) and rpcbind. I'm setting up a server application on it, and every single thing I try ...
2
votes
1answer
1k views

How to allow FORWARDing with firewalld on a Fedora 19 router

I've just installed Fedora 19 and I'm using firewalld instead of iptables, but I'm having difficulty interpretting the new terminology. I have 2 NICs. One is specificed ZONE="internal" and the other ...
2
votes
2answers
858 views

How can I port forward an LAN port to a WAN Ip with iptables?

Using iptables on my router (dd-wrt), I'd like to forward requests to the router on port 64738 from the LAN to an IP (192.168.10.14) on the WAN. This is the opposite of the norm (forwarding a request ...
0
votes
1answer
311 views

Prevent device from reaching WAN traffic (MAC address for example) - OpenWRT

I want to forbid a device on my network from accessing the internet. Computers still have to communicate with the device, and vice versa. OpenWRT version: OpenWrt Attitude Adjustment 12.09
1
vote
1answer
724 views

iptables routing marked packets from router to PC and routing them back to router

I'm trying to do deep packet inspection on HTTP packets. The purpose of this is to collect HTTP payload data and then create some proxy/cache-independent reports. Following this, the idea is to ...
0
votes
0answers
1k views

Using iptables to give an LXC container a routable IP

I'm using Docker to manage LXC containers. At the moment Docker configures the underlying LXC container with host-only routing and then uses iptables/DNAT to punch holes into the container, making it ...
0
votes
0answers
43 views

Libnetfilter code not working on a virtual machine

I am writing a code using libnetfilter_queue. For those who don't know, this library provides me the capability of accessing network packets in the userland. In the userland, I am doing certain ...
1
vote
1answer
997 views

Forward connections on 0.0.0.0:80 to 127.0.0.1:9091

I'm trying to set up a tor-relay. In order to allow tor to present a static web page explaining what it is I want the server to listen on port 80 and 443. In order to allow tor to use ...
3
votes
1answer
434 views

Seting up IPTables to forward multiple GoPro cameras

I have an interesting problem that involves multiple GoPro cameras. Basically, I need to have the ability to communicate with multiple GoPro cameras via a single network. The challenge is that the ...
0
votes
0answers
300 views

Port Forwarding to internal device without default gateway using iptables

I need to access externally (via Internet) one device in internal network which has no default gateway configured. Just IP and Mask. The standard iptable rule to accomplish the first part of this ...
1
vote
2answers
872 views

CentOS 6.4 and alternate SSH port not working

I've got a CentOS 6.4 machine and would like to change the default SSH port, and followed these instructions: CentOS Wiki After making those changes (including the "semanage port -a -t ssh_port_t -p ...
0
votes
0answers
40 views

Sniffing data on uClinux local loopback

I am looking for a way to monitor/sniff local loopback traffic inside a uClinux embedded device. I have several processes that communicate via the local loopback and want to capture this traffic on an ...
0
votes
0answers
225 views

Can't telnet: TCP connection doesn't get established

I am having issues with telnet from a machine. TCP connection is not getting established. SYN gets sent out and SYN_ACK comes back but not sure why the ACK is not getting sent back. I am guessing ...
0
votes
0answers
146 views

Linux Traffic Control of internet downlink with router as a client

I'd like to shape my internet downlink bandwidth in a bit peculiar way. My linux box at home acts as a router and a torrent client (and other downloads), making my router a router and client inside my ...
0
votes
0answers
836 views

Forwarding RDP connections with iptables

I have a workstation that runs Windows 7 as the host, and Ubuntu Server 12.04 in VMware on a bridged network. Both have their own static public IP address. However, I only have one hostname to work ...
0
votes
1answer
224 views

Iptables output with options unknown

I have been learning and studying up on iptables and port forwarding. There is a sample iptables output I can't decipher. It has the options --dir, --pol, and -m. Although I am familiar with -m it ...
0
votes
0answers
117 views

Public IP is not accessible

I have a VPS, after a DDos attack, the service provider disabled my server until the attack finished. After recovering from the DDos, the main IP is not accessible at all! I don't know where to look. ...
0
votes
1answer
740 views

Fedora's firewalld vs iptables

I am on Fedora 19. Is my understanding correct that as long as firewalld is up and running (and properly configured using firewall-config) the contents of the /etc/sysconfig/iptables has no meaning? ...
2
votes
1answer
1k views

Bandwidth limit by Port on iptables

What iptables function would i write to bandwidth limit all traffic on port 566 to 2KB/s? Im confused exactly of how to do this.
2
votes
0answers
156 views

Limit bandwidth on HTTP downloads based on file size

Is there a way to limit lets say in iptables or any proxy solution/software if a user is downloading a filesize that is greater than lets say 20MB it will limit his entire download at 2KB/s? ...
0
votes
1answer
196 views

Block brute-force on server with http auth behind cloudflare proxies

My server is behind Cloudflare proxies. I have configured simple http authentication to restrict access to some server resources. I'm trying to block brute-force attacks on http auth with fail2ban. ...
0
votes
0answers
220 views

Accessing my own public IP (WAN) via PPPOE internally

I have my own machine along private ip (LAN ip) 192.168.0.1 and public ip (WAN ip) IP 123.45.67.89 through PPPOE connection. So I wanted to access my own Apache server through my own public ip ...
2
votes
2answers
324 views

Force certain applications to use VPN

For a few days now, I've been trying to force only certain applications to use a VPN. I've thus far found it pretty simple to either force all applications to use it, or no applications to use it. ...
0
votes
1answer
691 views

Cannot open port 8080

I'm running a VmWare with an application under JBoss starting up on port 8080. I'm able to access the app from outside the VM if the iptables are off. However, I must turn on iptables due to some ...
3
votes
2answers
5k views

Ubuntu 11.04 server iptables port forwarding

I'm pretty new to iptables. My server has two Ethernet cards (eth0, eth1) and an ADSL router that is in bridge mode connected to the eth0 which created ppp0 when dialed. I'm trying to forward ...
1
vote
1answer
340 views

Internet access to host behind firewall using ssh tunnel

My goal is to give host behind firewall access to the internet. Below you can find brief description of network [internet] <-> [proxy] <-> [A] <-> (firewall) <-> [B] [A] - ...
1
vote
2answers
613 views

Iptables configuration to allow Steam Client

I recently got and setup a small linux (Debian) router box. I'm adding it to an existing network to create a small subnet with specific properties, namely internet content filtering. I'm highjacking ...
1
vote
2answers
106 views

DNS set correctly but website unreachable

I have the (sub)domain elo.bernardinuscollege.nl, which has a DNS A record that points to 54.225.118.87, which is correct (checked it with telnet, which indeed returns the right IP). For some reason ...