Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

0
votes
1answer
282 views

Install multiport module on iptables

I'am trying to install "fail2ban" on Cubidebian, a Debian port for Cubieboard (A raspberry like board). The following rule failed due to "-m multiport --dports ssh" options (It works, when i run ...
0
votes
1answer
245 views

Understanding how dnat works in iptables

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.3 and ...
1
vote
1answer
2k views

Iptables redirect to localhost?

Suppose I have a network with a server routing all connections from inside the network to the Internet. How can I set up iptables so that instead of routing incoming connections to the Internet, it ...
0
votes
1answer
89 views

NM+iptables: How to forward port to shared wired connection?

I connect to my wireless network through NetworkManager. In addition I have another computer connected to the first one through ethernet. I'm using NetworkManager to share the wireless connection of ...
0
votes
1answer
160 views

redirecting traffic from a network interface to dansguardian

I have setup a Squid + Dansguardian parental control at home. I connected a WIFI router to the Ubuntu machine and share that network for my kids' mobile devices. The parental control works fine on the ...
0
votes
1answer
278 views

Redirect PROXY traffic to test box using IPTABLES

Marked this as answered. I'm going to pass on trying to get this to work. It was only for testing. I'm currently using a proxy server (squid) that's listening on port 8080. Users' browsers are ...
1
vote
1answer
72 views

Drop IP fragments of a certain protocol

When conntrack is active, the iptables stack never sees a fragmented IP packet, only the reassembled one (source), so the -f test never matches. If I want to block any fragment I could set ...
0
votes
1answer
104 views

iptables FORWARD rule

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.1 and ...
0
votes
3answers
274 views

Can't ping after ip change

I'm running 3 virtual machines with Fedora 19. The machine B is set up with two networks adapters and provides que channel between machine A and machine C. The machine A IP is set to 192.168.1.1 and ...
0
votes
3answers
111 views

iptables rule to block traffic not specified in all other rules

Is there a way to add a rule in iptable to block traffic not specified/covered in all other rules ? I know that we can use ! to block specific ports and ip addresses but there are just too many rules ...
1
vote
0answers
66 views

Define IPTABLES rule

I am working with a linux based UTM appliance and have some disagreement with the client on the operation. THere is a standard GUI to configure port forwards in the firewall but for some reason he ...
1
vote
1answer
216 views

Adding a custom SSH port to Ubuntu 12.04 LTS through UFW

I am trying to configure a Ubuntu 12.04 based VPS and I have changed my ssh port from 22 to 803 and everything worked fine. After this I've installed UFW and now I can't login using SSH. Before I ...
0
votes
0answers
125 views

CentOS 6 service iptables panic

me and my friend were doing some firewall configs and in the meanwhile he thought it was a good idea to type "service iptables panic". Now we cannot put the firewall back on the original state ...
1
vote
0answers
216 views

iptables load balancing for TLS with request routing on the same connection

I am trying to set up iptables rules for TLS connection. I have three internal IP in my machine and I route requests coming on public IP at port 443 to each of these internal IP in RR. -A PREROUTING ...
0
votes
0answers
64 views

Let everything except SSH/VPN use a VPN-Connection, but keep SSH working

Given the latest revelations about the size of Internet surveillance, I decided to route all my traffic trough an out of country VPN. I set the OpenVPN client up on my Router (Asus RT-N56U using ...
1
vote
1answer
151 views

Disable SSH remote tunneling

I need to restrict SSH tunnel functions. Users should not be allowed to create remote tunnels but only tunnels to localhost. I tried to setup the whole thing in the SSH configuration but I can only ...
1
vote
0answers
91 views

nc connection refused even on loopback

I'm working on an embedded linux system, which appears to be networked correctly and is running ssh (dropbear) and rpcbind. I'm setting up a server application on it, and every single thing I try ...
2
votes
2answers
970 views

How can I port forward an LAN port to a WAN Ip with iptables?

Using iptables on my router (dd-wrt), I'd like to forward requests to the router on port 64738 from the LAN to an IP (192.168.10.14) on the WAN. This is the opposite of the norm (forwarding a request ...
2
votes
1answer
2k views

How to allow FORWARDing with firewalld on a Fedora 19 router

I've just installed Fedora 19 and I'm using firewalld instead of iptables, but I'm having difficulty interpretting the new terminology. I have 2 NICs. One is specificed ZONE="internal" and the other ...
0
votes
1answer
94 views

iptables as a proxy

I'm not sure how to start better so i'll be straight. I have to travel to a foreign country, but i need access to a server that is local to my hometown network. I have a DD-WRT router with only my PC ...
0
votes
2answers
114 views

Server can't be accessed

I have a server I rent from OVH and I rebooted it and now I can't connect to it, OVH responded with "The server has started (login is requested on the screen) but inaccessible by the network (not ...
0
votes
0answers
1k views

Using iptables to give an LXC container a routable IP

I'm using Docker to manage LXC containers. At the moment Docker configures the underlying LXC container with host-only routing and then uses iptables/DNAT to punch holes into the container, making it ...
0
votes
2answers
59 views

port based nating with iptables

on eth0 port we have public ip and eth1 we have ip 10.31.0.1 which provides dhcp and squid service.Port 8080,53,67,80,443 is open.Now for an application we have to open 1521,8443 port so that it can ...
0
votes
0answers
44 views

Libnetfilter code not working on a virtual machine

I am writing a code using libnetfilter_queue. For those who don't know, this library provides me the capability of accessing network packets in the userland. In the userland, I am doing certain ...
0
votes
0answers
91 views

Multiple eth0 addresses (aliases) and TCP source address

My eth0 card has several aliases from the same subnet (Load Balancing software) and eth0 IP is set as leading to default gateway on this host. I have an application that listens only on eth0:5 on ...
0
votes
0answers
42 views

Sniffing data on uClinux local loopback

I am looking for a way to monitor/sniff local loopback traffic inside a uClinux embedded device. I have several processes that communicate via the local loopback and want to capture this traffic on an ...
0
votes
0answers
242 views

Can't telnet: TCP connection doesn't get established

I am having issues with telnet from a machine. TCP connection is not getting established. SYN gets sent out and SYN_ACK comes back but not sure why the ACK is not getting sent back. I am guessing ...
1
vote
2answers
966 views

CentOS 6.4 and alternate SSH port not working

I've got a CentOS 6.4 machine and would like to change the default SSH port, and followed these instructions: CentOS Wiki After making those changes (including the "semanage port -a -t ssh_port_t -p ...
0
votes
0answers
936 views

Forwarding RDP connections with iptables

I have a workstation that runs Windows 7 as the host, and Ubuntu Server 12.04 in VMware on a bridged network. Both have their own static public IP address. However, I only have one hostname to work ...
0
votes
0answers
148 views

Linux Traffic Control of internet downlink with router as a client

I'd like to shape my internet downlink bandwidth in a bit peculiar way. My linux box at home acts as a router and a torrent client (and other downloads), making my router a router and client inside my ...
0
votes
1answer
238 views

Iptables output with options unknown

I have been learning and studying up on iptables and port forwarding. There is a sample iptables output I can't decipher. It has the options --dir, --pol, and -m. Although I am familiar with -m it ...
0
votes
0answers
309 views

Port Forwarding to internal device without default gateway using iptables

I need to access externally (via Internet) one device in internal network which has no default gateway configured. Just IP and Mask. The standard iptable rule to accomplish the first part of this ...
0
votes
0answers
125 views

Public IP is not accessible

I have a VPS, after a DDos attack, the service provider disabled my server until the attack finished. After recovering from the DDos, the main IP is not accessible at all! I don't know where to look. ...
0
votes
1answer
1k views

Fedora's firewalld vs iptables

I am on Fedora 19. Is my understanding correct that as long as firewalld is up and running (and properly configured using firewall-config) the contents of the /etc/sysconfig/iptables has no meaning? ...
2
votes
1answer
1k views

Bandwidth limit by Port on iptables

What iptables function would i write to bandwidth limit all traffic on port 566 to 2KB/s? Im confused exactly of how to do this.
2
votes
0answers
171 views

Limit bandwidth on HTTP downloads based on file size

Is there a way to limit lets say in iptables or any proxy solution/software if a user is downloading a filesize that is greater than lets say 20MB it will limit his entire download at 2KB/s? ...
3
votes
1answer
509 views

Seting up IPTables to forward multiple GoPro cameras

I have an interesting problem that involves multiple GoPro cameras. Basically, I need to have the ability to communicate with multiple GoPro cameras via a single network. The challenge is that the ...
0
votes
0answers
230 views

Accessing my own public IP (WAN) via PPPOE internally

I have my own machine along private ip (LAN ip) 192.168.0.1 and public ip (WAN ip) IP 123.45.67.89 through PPPOE connection. So I wanted to access my own Apache server through my own public ip ...
0
votes
1answer
887 views

Cannot open port 8080

I'm running a VmWare with an application under JBoss starting up on port 8080. I'm able to access the app from outside the VM if the iptables are off. However, I must turn on iptables due to some ...
2
votes
2answers
333 views

Force certain applications to use VPN

For a few days now, I've been trying to force only certain applications to use a VPN. I've thus far found it pretty simple to either force all applications to use it, or no applications to use it. ...
1
vote
1answer
372 views

Internet access to host behind firewall using ssh tunnel

My goal is to give host behind firewall access to the internet. Below you can find brief description of network [internet] <-> [proxy] <-> [A] <-> (firewall) <-> [B] [A] - ...
1
vote
3answers
3k views

Source Based Policy Routing & NAT (DNAT/SNAT) aka Multi WANs on CentOS 5

Originally posted at Unix and Linux but nobody was able to answer it, so m migrating the question here: My question is regarding Source Based Policy Routing on CentOS 5 with 2 WANs plus a LAN (NAT) ...
1
vote
2answers
108 views

DNS set correctly but website unreachable

I have the (sub)domain elo.bernardinuscollege.nl, which has a DNS A record that points to 54.225.118.87, which is correct (checked it with telnet, which indeed returns the right IP). For some reason ...
0
votes
1answer
971 views

How to do port forwarding/redirecting on Debian?

I have two questions. Question 1: My debian machine has interface eth3 with ip 192.168.57.28. If someone tries to connect to 192.168.57.28:1234 how do I redirect the request to another machine: ...
1
vote
3answers
395 views

Setting up two ADSL lines for home/business use

As a follow-up to this question which is still unresolved. I have two ADSL routers with different providers connected to different phone lines to the internet. As shown in the diagram. These routers ...
5
votes
2answers
19k views

need iptables rule to accept all incoming traffic

For my test environment i want to accept all incoming traffic, can someone please give me the iptable rule to be added. My current iptables -L -n output looks like this Chain INPUT (policy ...
0
votes
0answers
72 views

Restricting users to Internet only (no LAN) on router (RT-N56U and DGL-4300)

I've been working on this for the past 6 hours and have made no progress. The setup looks like this: |Internet|---|Router1|---|Router2|---|LAN1| | | ...
0
votes
1answer
455 views

Unable to ping my VirtualBox VM

I've installed a VirtualBox VM from http://virtualboximages.com/CentOS+6.4+x86_64+LAMP+Server+VirualBox+VDI+Virtual+Computer. My VM has access to internet, and I can ping the host. I've set a static ...
1
vote
1answer
2k views

Redirect incoming https to local ip with iptables

I have a router with 1 network interface (eth0, public ip) and an alias for eth0:0, local ip 192.168.1.1. I want to redirect all incoming https (443) traffic to another server. I tried it with ...
1
vote
1answer
359 views

Multiple IP addresses through the same interface and iptables

System Admin is not my strong point. My situation is we have 1 website that has 4 domains. The website itself serves different templates/content depending on which domain is used, simulating 4 ...